<!DOCTYPE html>
<html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>
<head>
<link href='https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css' rel='stylesheet' type='text/css'/>
<meta content='width=1100' name='viewport'/>
<meta content='X3PX4lxDgtVDGNZv1C7JhtjCIQXvizn6IzKnrLs6UmM' name='google-site-verification'/>
<meta content='u1Umno2V51sOefvZSupzfrrGof2xXx6743-CzHdL-Q4' name='google-site-verification'/>
<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
<meta content='blogger' name='generator'/>
<link href='https://blog.talosintelligence.com/favicon.ico' rel='icon' type='image/x-icon'/>
<link href="https://blog.talosintelligence.com/2018/06/vpnfilter-update.html" rel='canonical' />
<link rel="alternate" type="application/atom+xml" title="Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom" href="https://blog.talosintelligence.com/feeds/posts/default" />
<link rel="alternate" type="application/rss+xml" title="Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - RSS" href="https://blog.talosintelligence.com/feeds/posts/default?alt=rss" />
<link rel="service.post" type="application/atom+xml" title="Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom" href="https://www.blogger.com/feeds/1029833275466591797/posts/default" />

<link rel="alternate" type="application/atom+xml" title="Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom" href="https://blog.talosintelligence.com/feeds/5913788946872943043/comments/default" />
<!--[if IE]><script type="text/javascript" src="https://www.blogger.com/static/v1/jsbin/2068738220-ieretrofit.js"></script>
<![endif]-->
<link href='https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s640/image2.jpg' rel='image_src'/>
<meta content='http://blog.talosintelligence.com/2018/06/vpnfilter-update.html' property='og:url'/>
<meta content='VPNFilter Update - VPNFilter exploits endpoints, targets new devices' property='og:title'/>
<meta content='A blog from the world class Intelligence Group, Talos, Cisco&#39;s Intelligence Group' property='og:description'/>
<meta content='https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/w1200-h630-p-k-no-nu/image2.jpg' property='og:image'/>
<!--[if IE]> <script> (function() { var html5 = ("abbr,article,aside,audio,canvas,datalist,details," + "figure,footer,header,hgroup,mark,menu,meter,nav,output," + "progress,section,time,video").split(','); for (var i = 0; i < html5.length; i++) { document.createElement(html5[i]); } try { document.execCommand('BackgroundImageCache', false, true); } catch(e) {} })(); </script> <![endif]-->
<title>Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: VPNFilter Update - VPNFilter exploits endpoints, targets new devices</title>
<link href='https://fonts.googleapis.com/css?family=Roboto:100,300,400|Exo+2:500,400,300,100,700|Fira+Mono' rel='stylesheet'/>
<style id='page-skin-1' type='text/css'><!--
.CSS_LIGHTBOX {
z-index: 9999 !important;
}
html,body,div {
margin:0;
padding:0;
border:0;
}
html,body {width:100%;height:100%;position:relative;}
body {
display: table;
background-color: #26282A;
overflow-x: hidden;
color: #FFF;
font-family: 'Roboto', sans-serif;
font-weight: 300;
font-size: 11.5pt;
line-height: 1.5em !important;
text-align:left;
}
#header {
display: none;
}
a {
color: #ffffff;
}
a:hover {
color: #f19615 !important;
}
.widget {
line-height: 1.5em;
}
/* Float Controls */
.float-left  { float: left; }
.float-right { float: right; }
#page_wrapper {
min-height: 100%;
min-width:  100%;
background-color: #26282A;
position: relative;
top:    0;
bottom: 100%;
left:   0;
z-index: 300;
/*display: table-row; This was needed for sticky footer, but interferes with new mobile nav*/
}
.col_single {
max-width: 1200px;
width: 100%;
margin: 0 auto;
height: 100%;
float: none;
padding: 80px 15px 150px 15px;
}
.col_single .col-xs-12 { padding: 0 35px; }
.col-xs-12.wide { padding: 0 15px;}
#main-wrapper {
margin-left: 2%;
width: 98%;
display: inline;
word-wrap: break-word;
overflow: hidden;
}
@media (min-width: 950px) {
#main-wrapper {
width: 67%;
float: left;
}
}
label {
font-weight: 300;
text-align: left;
font-size: 10pt;
font-family: 'Roboto', sans-serif;
text-transform: none;
left: 0;
line-height: 1em !important;
display: block;
color: #bdb5b5;
padding-bottom: 4px;
}
/********* Navigation styles **********/
/* full navigation wrapper(s) */
#nav {
/*height: 100%;*/
margin: auto;
font-family: 'Roboto', sans-serif;
font-weight: 300;
font-size: 11pt;
background-color: #1f1f21;
}
#navigation {
width:  100%;
height: 100%;
position: fixed;
top:    0;
right:  0;
bottom: 0;
left:   0;
z-index: 0;
background-color: #005f8e;
text-align: left;
padding: 0;
}
/** This section after removing icons from desktop display **/
#top-nav-bar {
background-color: #161617;
color: #bfbfbf;
font-size: 11px;
font-weight: 400;
text-transform: uppercase;
text-align: right;
padding: 1px 12px;
/* only show on desktop sizes */
display: none;
}
.top-nav-links-wrapper li.site-link a {
padding-left: 20px !important;
background-size: 14px;
background-position: 0 4px;
font-weight: 400 !important;
color: #bfbfbf !important;
width: 100%;
height: 25px;
}
.top-nav-links-wrapper li.site-link a:hover {
color: #fff !important;
}
.account-link { background-image: url('icon_account_small.svg'); }
.account-link:hover { background-image: url('icon_account_small_white.svg'); }
li.site-link a {
background-repeat: no-repeat;
}
.navigation-links-wrapper .site-link a {
background-size: 100%;
background-position: center center;
min-width: 20px;
min-height: 20px;
margin-bottom: -4px;
}
.navigation-links-wrapper .site-link:first-of-type {
margin-left: 50px;
}
/* Navigation needs to be behind page wrapper for mobile but in front of it for desktop */
@media (min-width: 1000px) {
#nav {
height: 80px !important;
font-size: 9pt;
}
#navigation {
z-index: 500;
background-color: transparent;
text-align: center;
position:relative;
}
#top-nav-bar {
display: block;
}
}
#nav ul {
list-style: none;
margin:  0;
padding: 0;
display: block;
}
#nav ul.main-nav-list {
margin: 0 auto;
left: 0;
}
#nav li {
text-align: left;
}
.nav-item {
width: 300px;
border: 1px solid #005f8e;
}
#nav a {
color: #fff;
font-weight: 300;
display: block;
height: 100%;
width:  100%;
-webkit-transition: color 0.2s ease, background-color 0.5s ease;
-moz-transition:    color 0.2s ease, background-color 0.5s ease;
-o-transition:      color 0.2s ease, background-color 0.5s ease;
transition:         color 0.2s ease, background-color 0.5s ease;
}
#nav a:hover { color: #fff; background-color: #393d43; }
.nav-item a  { padding: 10px 15px; }
.nav-item:hover { border: 1px solid #393d43; }
@media (min-width: 1000px) {
.nav-item, .nav-item:hover { border: none; }
}
.primary_nav_link{
text-decoration:none
}
/* Overrides natural list display styles for horizontal nav on desktop */
/* Also splits navigation so there is a section on either side of logo */
@media (min-width: 1000px) {
#nav a {
padding: 0;
font-weight: 400;
}
#nav a.primary_nav_link {
/* increasing contrast */
color: #fff;
font-size: 1.1em;
padding-top: 19px;
padding-bottom: 19px;
font-weight: 300;
}
#nav a.primary_nav_link:hover span {
box-shadow: 0 2px 0 0 #0076be;
}
#nav a.primary_nav_link:hover{
color: #fff!important
}
#nav a:hover {
background-color: transparent;
}
#nav li {
display: inline-block;
text-align: center;
height: 100%;
margin: 0 8px;
}
#nav .sub-nav li { display:block;}
#nav span { display: block; line-height: 1.15em; }
}
@media (min-width: 1300px) {
#nav li { margin: 0 .5rem;}
#nav a.primary_nav_link {
font-size: 1.25em;
}
}
.break { display: none;}
/* Spacing between nav icons on large displays, also changes word breaks on longer link titles */
@media (min-width: 1000px) { .break { display: inline !important; } }
@media (min-width: 1170px) { .break { display: none !important; } }
/* end structural styles */
/****** LOGOS ******/
.navigation-logos-wrapper {
display: block;
float: left;
min-width: 300px;
padding-top: 8px;
text-align: left;
}
.navigation-links-wrapper {
display:block;
}
@media (min-width: 1000px) {
.navigation-links-wrapper {
display:inline-block;
margin-left: -75px;
}
}
@media (min-width: 1300px) {
.navigation-links-wrapper {
display:inline-block;
margin-left: -115px;
}
}
@media (min-width: 1600px) {
.navigation-links-wrapper {
/* centers links, accounts for logo wrapper on left of desktop nav */
margin-left: -357px;
padding-top:2px;
}
}
#cisco-logo-wrapper, #talos-logo-wrapper {
display: inline-block;
}
#cisco-logo-wrapper {
border-right: 1px solid #3f4143;
margin-left: 10px;
margin-right: 12px;
background-image: url('https://www.talosintelligence.com/assets/logo_cisco_white.svg');
background-repeat: no-repeat;
width: 82px;
height: 35px;
opacity: 0.6;
}
#talos-logo-wrapper svg {
height: 36px;
width: auto;
}
#talos-logo-wrapper svg path.st1 {
fill: #0077BE;
}
#nav-logo svg {
transition:         max-width 0.2s ease;
-webkit-transition: max-width 0.2s ease;
-moz-transition:    max-width 0.2s ease;
-o-transition:      max-width 0.2s ease;
}
#nav-logo svg path {
transition:         fill 0.2s ease;
-webkit-transition: fill 0.2s ease;
-moz-transition:    fill 0.2s ease;
-o-transition:      fill 0.2s ease;
}
@media (min-width: 1000px) {
#nav-logo {
background-color: transparent;
}
}
/* Mobile navigation has an additional icon for 'home' in the shelf menu since
/* the main logo stays in the center of the page away from other menu items */
#mobile-nav-topper {
display: inline-block;
width: 300px;
padding: 9px 10px 4px 10px;
background-color: #1278ba;
border-bottom: 1px solid #fff;
text-align: center;
}
#mobile-nav-topper a:hover {
background: transparent !important;
}
@media (min-width: 1000px) {
#mobile-nav-topper { display: none; }
}
/* end mobile logo styles */
/****** NAVIGATION LINK ICONS *******/
.nav-item svg {
padding-top: 3px;
margin-top: 7px;
}
@media (min-width: 1000px) {
.nav-item svg { padding: 0; margin: 0; }
}
#link_blog { margin-top: -1px; } /* Adjusts for pencil that sticks slightly above icon box */
/****** LINK TEXT ADJUSTMENTS ******/
#nav span {
padding-left: 15px;
vertical-align: 5px; /* offsets span sitting at bottom of <a> tag on mobile nav */
}
@media (min-width: 1000px){
#nav span {
padding-left: 0;
vertical-align: baseline;
}
.primary_nav_link svg {
display: none;
}
}
/* Mobile Shelf Styles */
.nav-trigger + label, #page_wrapper, #nav-logo, #footer, .sub-nav-trigger, .sub-nav {
transition:         left 0.2s;
-webkit-transition: left 0.2s;
-moz-transition:    left 0.2s;
-o-transition:      left 0.2s;
}
.nav-trigger:checked + label, .nav-trigger:checked ~ #page_wrapper, .nav-trigger:checked ~ #nav-logo, .nav-trigger:checked ~ #footer {
left: 300px;
}
.sub-nav-trigger:checked ~ .sub-nav {
left: 50px;
}
.sub-nav-trigger:checked ~ .subnav-overlay {
visibility: visible;
opacity: 1;
}
/* If someone expands mobile nav menu and then changes browser window to desktop nav (over 1000px) */
@media (min-width: 1000px) {
.nav-trigger:checked + label, .nav-trigger:checked ~ #page_wrapper, .nav-trigger:checked ~ #nav-logo, .nav-trigger:checked ~ #footer {
left: 0;
}
.sub-nav-trigger:checked ~ .sub-nav {
left: 0;
}
.desktop-hide { display: none !important; }
}
/* Mobile sub navigation styles */
.primary-link-wrapper {
width: 243px;
display: inline-block;
}
.subnav-overlay {
width:  100%;
height: 100%;
position: fixed;
top:    0;
right:  0;
bottom: 0;
left:   0;
background-color: #005f8e;
visibility: hidden;
opacity: 0;
transition: visibility 0s, opacity 0.25s linear;
}
.subnav-overlay svg {
opacity: 0.5;
margin: 10px 0 0 10px;
}
.sub-nav {
width:  100%;
height: 100%;
position: fixed;
top:    0;
right:  0;
bottom: 0;
left:   300px;
z-index: 1;
list-style: none;
background: #393d43;
}
.sub-nav li {
width: 100%;
height: auto;
}
.sub-nav li a {
display: block;
padding: 12px 20px;
color: white;
text-decoration: none;
}
.sub-nav a:hover {
background-color: #f19615;
}
.subnav-back-button {
cursor: pointer;
width: 100%;
padding: 20px;
background-color: #2d3035;
}
/* css chevron */
.subnav-back-button::before {
border-style: solid;
border-width: 3px 3px 0 0;
content: '';
display: inline-block;
height: 12px;
width:  12px;
position: relative;
vertical-align: top;
transform: rotate(-135deg);
margin-right: 30px;
}
.sub-nav h1 {
font-family: "Roboto", Helvetica, Arial, sans-serif;
text-transform: none;
font-weight: 300;
font-size: 16pt;
padding-top: 10px;
margin-top: 20px;
margin-bottom: 10px;
}
.sub-nav-trigger-label:hover svg g circle {
fill: #f19615;
}
.sub-nav-trigger-label:hover {
background-color: #393d43;
}
.sub-nav-trigger-label {
cursor: pointer;
padding: 0;
margin:  0;
text-align: center;
display: inline-block;
float: right;
width: 55px;
-webkit-transition: color 0.2s ease, background-color 0.5s ease;
-moz-transition:    color 0.2s ease, background-color 0.5s ease;
-o-transition:      color 0.2s ease, background-color 0.5s ease;
transition:         color 0.2s ease, background-color 0.5s ease;
}
@media (min-width: 1000px) {
.sub-nav-trigger-label, .sub-nav-trigger {
display: none;
}
.primary-link-wrapper {
width: auto;
display: block;
height: 100%;
}
}
/* Subnav (dropdown) styles for desktop and large mobile */
@media (min-width: 1000px) {
.sub-nav {
display:block !important;
height: 0;
top: 80px;
z-index: 5000;
padding: 0;
margin-left: -55px !important;
white-space: nowrap;
text-align: left !important;
left: auto;
right: auto;
bottom: auto;
}
#nav ul::before, #nav ul::after {
content: "";
display: table;
}
#nav ul::after {
clear: both;
}
.sub-nav li {
overflow: hidden;
text-align: left !important;
background-color: #393d43;
height: 0;
width: 230px;
-webkit-transition: height 200ms ease-in, background-color 0.3s ease;
-moz-transition:    height 200ms ease-in, background-color 0.3s ease;
-o-transition:      height 200ms ease-in, background-color 0.3s ease;
transition:         height 200ms ease-in, background-color 0.3s ease;
}
.sub-nav a {
display: inline-block;
margin-top: -4px;
padding: 10px !important;
}
.sub-nav li:hover {
background-color: #f19615;
}
.sub-nav li:hover a {
color: #212224 !important;
font-weight: 500 !important;
}
#nav ul > li:hover .sub-nav li {
height: 36px !important;
}
}
/* Mobile shelf trigger styles */
/* hides the checkboxes */
.nav-trigger, .sub-nav-trigger {
position: absolute;
clip: rect(0, 0, 0, 0);
display: block;
}
label[for="nav-trigger"] {
position: fixed;
padding: 15px 0 0 15px;
z-index: 9900;
height: 50px;
width:  100px;
cursor: pointer;
display: block;
}
.nav-item {
height: 55px;
}
@media (min-width: 1000px) {
.nav-trigger, label[for="nav-trigger"] { display: none; }
.nav-item { width: auto; border: none;}
}
.login-button {
border-radius: 2px;
background-color: #0076be;
color: #fff !important;
padding: 0 6px !important;
line-height: 1.75em;
-webkit-transition: background .5s;
transition: background .5s;
}
.login-button:hover {
background-color: #f19615 !important;
}
.login-button svg {
display: block;
float: left;
height: 15px;
width: 15px;
margin-top: -3px;
}
.login-button svg path {
fill: #9EA0A5;
-webkit-transition: fill 0.2s ease;
-moz-transition:    fill 0.2s ease;
-o-transition:      fill 0.2s ease;
transition:         fill 0.2s ease;
}
.login-button:hover svg path {
fill: #fff;
}
.display-name {
text-transform: none;
color: #fff;
}
.desktop-hide .login-button {
max-width: 280px;
padding: 12px 24px !important;
font-weight: 400 !important;
background-color: #fff;
color: #25272a !important;
text-align: center;
font-size: 1.1em !important;
}
.acct_links {
color: #fff;
font-weight: 300 !important;
font-family: 'Roboto', sans-serif;
margin: 0;
padding-top: 5px;
padding-left: 10px;
height: auto !important;
}
/*********** Footer Styles *********/
#footer {
clear: both;
min-height: 110px;
text-align: center;
color: #cfd0d4;
font-size: 10.5pt;
font-family: 'Roboto', sans-serif;
font-weight: 400;
width: 100%;
background-color: #212224;
display: block;
position: absolute;
}
.copyright{
font-size: .85em;
font-weight: 300;
padding-top: .75em;
color: #cfd0d4
}
a.copyright-underline{
box-shadow:0 1px 0 0 #ed6f09;
text-decoration:none!important;
}
#footer .footer_nav_wrapper {
margin: auto;
}
#footer ul {
margin: auto;
list-style: none;
}
#footer a {
font-family: 'Roboto', sans-serif!important;
color:#cfd0d4!important;
text-decoration:none;
}
ul.footer_nav {
text-align: center;
padding: 0 20px;
}
.footer_nav li a{
display: inline-block;
width: 195px!important;
line-height: 21px!important;
font-weight: 300;
}
@media  screen and (min-width: 992px) {
ul.footer_nav {
text-align: left;
}
}
.nopad {
margin: 0;
padding: 0;
}
ul.footer_nav li.list_col {
text-align: center;
}
ul.footer_nav li ul li {
padding: 1px 0;
}
/* styles for full width nav col with straight 1 col list of links - small mobile screens */
ul.footer_nav li ul.pad.second.last {
padding-bottom: 32px;
}
ul.footer_nav li ul.pad.first.top {
padding-top: 32px;
padding-left: 0;
}
ul.footer_nav ul {
padding-left: 0;
}
@media screen and (min-width: 450px) {
/* styles for full width nav col, 2 list cols */
ul.footer_nav li ul.pad {
padding: 32px 25px 32px 0;
}
ul.footer_nav li ul.pad.last {
padding-right: 0;
padding-left: 0;
}
ul.footer_nav li ul.pad.second {
padding-top: 0;
}
ul.footer_nav li ul.pad.first {
padding-bottom: 0;
}
ul.footer_nav li.list_col {
display: inline-block;
text-align: left;
}
}
@media screen and (min-width: 800px) {
/* styles for full width nav col, 4 list cols */
ul.footer_nav li ul.pad.first, ul.footer_nav li ul.pad.second {
padding: 32px 28px 32px 0;
}
li.nopad {
display:inline-block;
}
}
@media screen and (min-width: 1050px) {
/* styles for full width nav col, expanded 4 list cols - large screens */
ul.footer_nav li ul.pad {
padding: 32px 40px 32px 0;
}
}
#footer .footer_corporate img {
max-width: 85px;
margin-top: 20px;
}
.underline {
text-decoration: underline;
}
.footer_corporate {
padding-bottom: 15px;
border-top: 2px solid #3f4143;
line-height: 1.35em;
}
#footer h5 {
font-weight: 400;
font-size: 11pt;
text-align: center;
color: #9ea0a5;;
letter-spacing: .25pt;
}
.row {
clear: both;
}
@media  screen and (min-width: 992px) {
.connect_social ul {
text-align: right;
padding-right: 20px;
padding-bottom: 0;
}
.connect_social {
width: 25%;
display:inline-block;
}
.col-md-9 {
width:75%;
float: left;
}
#footer h5 {
padding-top: 35px;
text-align: right;
padding-right: 52px;
}
}
.connect_social ul {
text-align: center;
padding-right: 0;
padding-bottom: 7px;
padding-left: 0;
}
.connect_social ul li {
display: inline-block;
}
.connect_social ul li img {
width: 33px;
height: 33px;
margin: 5px 3px;
}
#footer .connect_social h5{
padding-right: 0;
text-align: center;
}
#footer a {
color: rgba255,255,255,.25)
cursor: pointer;
font-family: "Exo 2", sans-serif;
}
#footer a:hover {color: #f19615;}
.full-height {
height: 100%
}
#content-wrapper {
display: inline-block;
}
/*********** Sidebar Styles ************/
#sidebar-wrapper {
margin-right: 2%;
display: inline;
word-wrap: break-word;
overflow: hidden;
padding-top: 20px;
border-left: 2px solid #26282A;
}
@media (min-width: 950px) {
#sidebar-wrapper {
width: 25%;
float: right;
}
}
.sidebar h2 {
font-family: 'Exo 2', sans-serif;
font-weight: 700;
color: #3f7b9f;
text-transform: uppercase;
font-size: 11pt;
letter-spacing: 1.5pt;
}
.sidebar ul li {
font-size: 9pt;
}
.sidebar .widget {
border-bottom: 2px solid #5c656d;
margin: 0 0 1.5em;
padding: 0 0 1.5em;
}
a.post-count-link {
font-family: 'Exo 2', sans-serif;
color: #9EA0A5;
text-transform: uppercase;
letter-spacing: 1.5pt;
font-weight: 500;
}
a.post-count-link:hover {
color: #f19615;
}
.posts a {
color: #ffffff;
}
.posts a:hover {
color: #f19615;
}
.Label ul {
margin: 5px 0;
padding: 5px 10px;
list-style: none;
list-style-image: none;
max-height: 200px;
overflow: scroll;
border: 1px solid #5c656d;
}
.Label ul li {
background: none;
list-style: none;
list-style-image: none;
list-style-position: outside;
border-width: 0;
padding-left: 15px;
text-indent: -15px;
margin: .25em 0;
background-image: none;
}
.Label ul li a {
color: #ffffff;
font-family: Roboto, sans-serif;
text-transform: uppercase;
font-size: 12px;
}
.Label ul li a:hover {
color: #f19615;
}
/** zippy is the triangle expanders **/
.zippy {
color: #9EA0A5;
}
.subscribe-wrapper {
margin: 0.5em 0;
}
div.subscribe {
background-color: #5c656d;
font-size: 10pt;
font-weight: 100 !important;
color: #ffffff;
border-radius: 2px;
width: 100%;
line-height: 2em;
padding: 1px;
margin: 8px 0;
transition: background-color 0.5s ease;
}
div.subscribe:hover {
background-color: #9EA0A5;
}
div.subscribe div.top, div.subscribe div.bottom {
background-image: none !important;
width: 100%;
}
.feed-icon {
padding: 4px 10px 6px 5px;
width: 15px;
height: auto;
vertical-align: middle;
}
.subscribe-dropdown-arrow {
margin-top: 3px;
margin-left: 10px;
}
#category_list li{
list-style:none;
}
#category_list span{
margin-right: 9px;
padding-left: 18px;
white-space: nowrap;
display: inline-block;
}
#category_list button{
border: none;
border-right: 1px solid #5c656d;
background-color: #5c656d;
font-size: 10pt;
color: #ffffff;
width: auto;
text-align: left;
height: 18px;
font-size: .75em;
margin: 0px -22px;
display: inline-block;
outline: none;
text-transform: capitalize;
transition: background-color 0.5s ease;
}
#category_list a {
position: relative;
margin-left: 20px;
}
#category_list button.selected{
color: #26282A;
background: #ef6f09;
}
#category_list button.selected:hover{
background: #f19615;
}
#category_list button .feed-icon {
width: 15px;
padding: 5px 4px 5px 3px;
}
#category_list button:hover {
background-color: #9EA0A5;
}
#category_list .feed-icon {
padding: 6px 4px 7px 6px;
}
a.feed-reader-link {
color: #ffffff !important;;
}
.gsc-search-button {
background-color: #5c656d;
border-radius: 2px;
border: none;
color: #ffffff;
}
input.gsc-input {
width: 95% !important;
height: 20px;
}
form.gsc-search-box {
margin-top: 7px !important;
}
#Gadget1 h2 {
display: none;
}
#Gadget1 {
text-align: left;
}
A-content, .blog-content a {
color: #ffffff;
text-decoration: none;
}
.blog-title, .blog-title a {
font-family: 'Exo 2', sans-serif;
color: #9EA0A5;
text-transform: uppercase;
letter-spacing: 1.5pt;
font-weight: 500;
text-decoration: none;
padding-bottom: 4px;
}
.blog-title a:hover, .blog-content a:hover {
color: #f19615;
}
.blog-list-container .blog-icon {
display: none;
}
/*********** Blog Post Styles ***********/
.post-outer {
margin-bottom: 40px;
}
.date-header {
font-family: 'Exo 2', sans-serif;
font-weight: 700;
color: #9EA0A5;
text-transform: uppercase;
font-size: 9pt;
letter-spacing: 1.5pt;
padding-bottom: 5px;
}
.date-outer {padding: 0;}
.date-outer p a, .date-outer i a, .date-outer .jump-link a, .post-body > a {
color: #ffffff;
box-shadow: 0px 1px 0px 0px #F19615;
text-decoration: none;
}
.post-title, .post-title a {
font-family: 'Exo 2', sans-serif;
font-size: 19pt;
font-weight: 400;
color: #3f7b9f;
text-decoration: none;
padding-bottom: 20px;
box-shadow: none;
}
/* removing box shadows on links with images */
a < img { box-shadow: none !important;}
a[imageanchor] { box-shadow: none !important;}
h3 {
font-family: 'Exo 2', sans-serif;
font-weight: 500;
color: #3f7b9f;
font-size: 14pt;
padding-top: 20px;
line-height: 1.25em;
margin-bottom: 15px;
}
h5 {
font-family: 'Exo 2', sans-serif;
font-weight: 700;
color: #587282;
font-size: 9pt;
text-transform: uppercase;
letter-spacing: 1.5pt;
margin: 0;
padding-top: 10px;
}
pre {
font-family: 'Fira Mono', monospace;
font-size: 10pt !important;
line-height: 1.5em !important;
color: #f19615;
border: 2px solid #5c656d;
padding: 20px;
background-color: #26282a;
margin: 30px 0;
white-space: pre-wrap;       /* css-3 */
white-space: -moz-pre-wrap;  /* Mozilla, since 1999 */
white-space: -pre-wrap;      /* Opera 4-6 */
white-space: -o-pre-wrap;    /* Opera 7 */
word-wrap: break-word;
max-width: 700px;
}
.entry-content h2 {
font-family: 'Exo 2', sans-serif;
font-weight: 400;
color: #3f7b9f;
text-transform: uppercase;
font-size: 17pt;
}
h4 {
font-family: 'Exo 2', sans-serif;
font-weight: 500;
text-transform: uppercase;
color: #9EA0A5;
}
.entry-content, .post-body {
color: #FFFFFF;
font-family: 'Roboto', sans-serif;
font-weight: 300;
font-size: 11.5pt;
line-height: 1.5em !important;
}
.entry-content img {
max-width: 100%;
height: auto;
margin-top: 30px;
margin-bottom: 10px;
}
figcaption {
font-size: 10pt;
color: #ec6e08;
font-weight: 500;
margin-bottom: 30px;
text-align: left;
}
@media (min-width: 950px) {
max-width: 700px;
height: auto;
}
.post-body {
margin-top: 10px;
}
.post-body table {
}
p {
padding: .75em 0;
margin: 0;
}
.post-footer {
margin: 40px 0 15px 0;
}
.post-footer-line a, .comment-author a, .comment-timestamp a, .comment-footer a {
text-decoration: none;
box-shadow: none;
color: #f19615;
}
.post-footer-line, .comment-author, .comment-timestamp, .comment-footer {
color: #9EA0A5;
font-size: 9pt;
letter-spacing: 1.5pt;
font-family: 'Exo 2', sans-serif;
font-weight: 400;
text-transform: uppercase;
}
.post {
margin: .5em 0 1.5em;
border-bottom: 1px solid #5c656d;
padding-bottom: 1.5em;
}
#comments {
border-bottom: 1px solid #5c656d;
padding: 20px 0;
margin-bottom: 40px;
}
.comment {
border-bottom: 1px solid #5c656d;
}
#comments .blogger-comment-icon, .blogger-comment-icon {
padding: 0;
background: none;
}
.comment-author {
border-top: 1px solid #5c656d;
padding-top: 20px !important;
}
.comments .avatar-image-container {
display:none;
}
.comment-header .user, .comment-header .user a {
color: #f19615;
font-family: 'Exo 2', sans-serif;
font-weight: 500 !important;
text-transform: uppercase;
box-shadow: none;
}
.comment-header .datetime, .comment-header .datetime a {
color: #9EA0A5;
font-family: 'Exo 2', sans-serif;
font-weight: 300;
text-transform: uppercase;
box-shadow: none;
}
.comments .comment-replybox-thread {
margin-top: 40px;
}
h4 {
font-family: 'Exo 2', sans-serif;
font-weight: 500;
text-transform: uppercase;
color: #9EA0A5;
}
img.email {
width: 25px;
height: auto;
}
.blog-pager, .feed-links {
color: #9EA0A5;
font-size: 9pt;
letter-spacing: 1.5pt;
font-family: 'Exo 2', sans-serif;
font-weight: 400;
text-transform: uppercase;
}
.blog-pager a, .feed-links a {
box-shadow: none;
color: #f19615;
}
.social-media-share a {
box-border: none !important;
}
.social-media-share {
margin-top: 15px;
display: flex;
}
.social-media-share img {
width: 25px;
height: 25px;
margin-right: 15px;
}
.social-media-share span {
font-family: 'Exo 2', sans-serif;
font-weight: 500;
text-transform: uppercase;
color: #9EA0A5;
}
.social-media-share .linkedin img{
width: 30px;
height: unset;
position: relative;
top: -3px;
}
.social-call {
float: left;
padding-top: 4px;
margin-right: 15px;
}
iframe {
margin: 20px 0;
max-width: 100%;
}
/****** Search & Label Filter Results ****/
.status-msg-wrap {
width: 100%;
border-bottom: 1px solid #5c656d;
text-align: left;
padding-bottom: 10px;
margin-bottom: 20px;
}
.status-msg-body {
text-align: left;
font-family: 'Roboto', sans-serif;
font-weight: 300;
text-transform: none;
}
.status-msg-body a {
text-decoration: none;
color:  #3f7b9f;
font-weight: 500;
}
.status-msg-body b {
color:  #f19615;
}
.status-msg-bg {
background-color: transparent;
}
.status-msg-border {
border: none;
}
#uds-searchControl .gsc-results {
background-color: transparent !important;
border-bottom: 2px solid #5c656d !important;
border-top: 0 !important;
border-left: 0 !important;
border-right: 0 !important;
}
.gsc-result {
margin-bottom: 10px !important;
padding-bottom: 10px !important;
}
.gs-relativePublishedDate {
font-family: "Exo 2",sans-serif;
font-weight: 500;
font-size: 9pt;
color: #9EA0A5 !important;
text-transform: uppercase;
letter-spacing: 1.5pt;
}
#uds-searchControl .gs-result .gs-title, #uds-searchControl .gs-result .gs-title *, #uds-searchControl .gsc-results .gsc-trailing-more-results, #uds-searchControl .gsc-results .gsc-trailing-more-results * {
font-family: "Exo 2",sans-serif;
font-weight: 700;
text-transform: uppercase;
letter-spacing: 1.5pt;
color:  #6a8596 !important;
text-decoration: none !important;
}
#uds-searchControl .gs-result .gs-title b {
color: #F19615 !important;
}
.gs-visibleUrl a.gs-visibleUrl {
color: #ffffff !important;
text-decoration: none;
box-shadow: 0px 1px 0px 0px #F19615;
line-height: 2em !important;
}
.gsc-url-bottom .gs-visibleUrl {
color: #F19615 !important;
font-weight: 700;
line-height: 2em !important;
text-decoration: underline;
}
#uds-searchControl .gsc-cursor-current-page {
color: #ffffff;
}
.gs-snippet {
padding-top: 5px !important;
}
#uds-searchControl .gsc-tabHeader.gsc-tabhActive {
background-color: #9EA0A5;
text-transform: uppercase;
font-family: "Exo 2",sans-serif;
}
#uds-searchControl .gsc-tabHeader.gsc-tabhInactive {
background-color: #5c656d;
text-transform: uppercase;
font-family: "Exo 2",sans-serif;
}
#uds-searchControl .gsc-tabHeader.gsc-tabhActive, #uds-searchControl .gsc-tabHeader.gsc-tabhInactive {
border: none !important;
border-top-left-radius: 4px;
border-top-right-radius: 4px;
font-weight: 600;
color: #212224;
padding: 3px 10px;
margin: 0 2px 0 0;
}
.gsc-tabsArea {
margin-bottom: 0 !important;
}
.gsc-above-wrapper-area {
padding: 5px 0 1px 0 !important;
border-bottom: 2px solid #9EA0A5 !important;
}
#uds-searchControl .gsc-cursor-current-page {
color: #ffffff !important;
}
.gsc-results .gsc-cursor-box .gsc-cursor-page {
text-decoration: none !important;
color: #9EA0A5 !important;
}
#uds-searchClearResults {
height: 15px !important;
width: 15px !important;
border-width: 2px !important;
}
.gsc-result-info {
color: #ffffff !important;
}
.gsc-webResult .gsc-result {
border-bottom: 1px solid #5c656d !important;
}
.gs-per-result-labels {
text-transform: uppercase;
font-family: "Exo 2",sans-serif;
font-size: 9pt;
color: #9EA0A5 !important;
font-weight: 500;
}
.gs-webResult div.gs-per-result-labels a.gs-label {
text-transform: uppercase;
font-family: "Exo 2",sans-serif;
font-size: 9pt;
color: #3f7b9f !important;
font-weight: 700;
text-decoration: none !important;
}
#Navbar1 {display:none!important;}
## Fix for lightbox preview
.CSS_LIGHTBOX {
z-index: 9999 !important;
}
#### Edits for EU Cookie Notice
.cookie-choices-info {
background-color:#5c656d !important;
}
#cookieChoiceInfo {
z-index:99999 !important;
}
.cookie-choices-info .cookie-choices-text{
color:#fff !important;
}
.cookie-choices-info .cookie-choices-button{
background-color: #ef6f09 !important;
color:#fff !important;
}
/* Styles for the Threat Roundup Posts here */
.threat-roundup-content table {
font-weight: 300;
font-family: 'Roboto', sans-serif;
font-size: 10pt;
text-align: left;
border: none;
border-collapse: collapse !important;
width: 100%;
margin-bottom: 40px;
}
.threat-roundup-content table th {
text-transform: uppercase;
font-weight: 400;
background-color: #3e4145;
color: #b9b9b9;
}
.threat-roundup-content table th, .threat-roundup-content table td {
padding: 4px 8px;
vertical-align: top;
}
.threat-roundup-content table.threats-table td {
padding-top: 8px;
padding-bottom: 8px;
line-height: 1.35em;
}
.threat-roundup-content table > tbody > tr:nth-of-type(odd) {
background-color: #2e3135;
}
hr.thin {
border-color: grey;
border-style: solid;
margin: 15px 0;
}
.screenshot-section + hr.thin {
margin-bottom: 40px;
}
.threat-roundup-content h2 {
margin: 40px 0;
}
.threat-roundup-content code {
font-family: 'Fira Mono', monospace;
color: #f19615;
font-weight: 300;
font-size: 8.75pt;
}
.threat-roundup-content td code {
word-break: break-all;
}
.threat-name-col {
color: #f19615;
font-weight: 400;
}
.text-center {
text-align: center;
}
.code {
background-color: #26282a;
color: #f19615;
border: 2px solid #5c656d;
padding: 20px;
margin: 10px 0 40px 0;
}
.code code {
line-height: 1.65;
}
.threat-table-note {
font-size: 9pt;
margin-top: -36px;
margin-bottom: 36px;
}
.coverage-check img {
width: 20px;
height: auto;
margin: -3px 0 !important;
}
.coverage-na {
font-style: italic;
}
.threat-coverage-table {
margin: auto;
max-width: 400px;
}
table.threat-coverage-table td, table.threat-coverage-table th {
padding: 6px 20px;
}
.screenshot-section h4 {
color: #f19615;
font-weight: 400;
margin-bottom: 8px;
}
.screenshot-section img {
margin: 0 auto 40px auto;
}
.amp-section img {
max-width: 350px;
}
table.exploit-prev-table {
margin-top: 40px;
}
table.exploit-prev-table td {
font-size: 8.75pt;
line-height: 1.5em;
padding: 8px 8px 16px 8px;
}
table.exploit-prev-table td.detection-col {
font-size: 9.5pt;
padding: 4px 8px;
}
.detection-col .threat-name-col {
font-weight: 500;
}
.button-link {
box-shadow: none !important;
}
.blog-podcast-button {
border-radius: 2px;
color: #fff;
border: none;
background-color: #5c656d;
line-height: 2em;
padding: 4px 16px 4px 12px;
margin-bottom: 20px;
margin-top: 10px;
}
.blog-podcast-button img {
width: 20px;
height: 20px;
margin: 0;
float: left;
padding-right: 4px;
padding-top: 3px;
}

--></style>
<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1029833275466591797&amp;zx=1c47cbfd-ad70-4608-bf07-3201299944bc' media='none' onload='if(media!=&#39;all&#39;)media=&#39;all&#39;' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1029833275466591797&amp;zx=1c47cbfd-ad70-4608-bf07-3201299944bc' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script type="text/javascript" language="javascript">
  // Supply ads personalization default for EEA readers
  // See https://www.blogger.com/go/adspersonalization
  adsbygoogle = window.adsbygoogle || [];
  if (typeof adsbygoogle.requestNonPersonalizedAds === 'undefined') {
    adsbygoogle.requestNonPersonalizedAds = 1;
  }
</script>


</head>
<body>
<div class='no-items section' id='header'></div>
<!-- Begin Navigation -->
<nav id='nav'>
<!-- Top navigation section: Account links / sign in -->
<div id='top-nav-bar'>
<ul class='top-nav-links-wrapper'>
<li>
</li>
</ul>
</div>
<!-- Main Navigation -->
<div id='navigation'>
<div id='mobile-nav-topper'>
<a href='https://www.talosintelligence.com'>
<!-- TALOS MOBILE ICON 'O' -->
<svg height='55px' viewBox='0 0 55 55' width='55px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g>
<g class='mobile-nav-home'>
<path clip-rule='evenodd' d='M45.201,12.343c0.378,0.48,0.758,0.925,1.096,1.401    c2.975,4.207,4.543,8.876,4.494,14.044c-0.05,5.452-1.643,10.386-5.186,14.593c-3.484,4.133-7.929,6.73-13.182,7.895    c-6.313,1.398-12.216,0.275-17.695-3.131c-0.441-0.273-0.847-0.6-1.266-0.904c-0.11-0.078-0.208-0.174-0.337-0.287    c0.127-0.141,0.246-0.27,0.366-0.398c0.887-0.949,1.765-1.904,2.663-2.844c0.114-0.119,0.321-0.217,0.485-0.217    c3.658-0.006,7.318,0,10.975,0.008c3.458,0.006,6.913,0.02,10.369,0.02c0.957,0,1.871-0.193,2.62-0.844    c0.797-0.693,1.157-1.596,1.157-2.643c0.001-7.533,0.003-15.067-0.005-22.601c-0.002-0.309,0.088-0.524,0.3-0.743    C43.098,14.598,44.127,13.49,45.201,12.343' fill='#FFFFFF' fill-rule='evenodd'></path>
<path clip-rule='evenodd' d='M41.402,8.822c-0.99,1.027-1.994,2.021-2.935,3.072    c-0.312,0.35-0.616,0.416-1.036,0.415c-6.98-0.009-13.957-0.007-20.938-0.007c-2.039,0-3.561,1.514-3.561,3.557    c0,6.504,0.002,13.008,0.006,19.512c0.002,0.973,0.011,1.943,0.004,2.914c0,0.133-0.04,0.301-0.127,0.393    c-1.069,1.162-2.15,2.314-3.229,3.469c-0.021,0.023-0.052,0.039-0.109,0.08c-0.159-0.188-0.323-0.369-0.471-0.562    c-2.535-3.348-4.119-7.102-4.605-11.268c-0.61-5.229,0.194-10.229,2.835-14.839c2.669-4.664,6.655-7.805,11.618-9.75    c3.205-1.257,6.533-1.852,9.977-1.621c4.478,0.298,8.553,1.754,12.227,4.325c0.101,0.072,0.197,0.151,0.291,0.229    C41.364,8.755,41.374,8.778,41.402,8.822' fill='#FFFFFF' fill-rule='evenodd'></path>
<path clip-rule='evenodd' d='M39.799,12.47c0.873-0.911,1.749-1.829,2.676-2.797    c0.605,0.564,1.195,1.112,1.816,1.691c-0.941,0.985-1.817,1.903-2.703,2.83c-0.276-0.339-0.511-0.688-0.807-0.975    C40.492,12.941,40.145,12.728,39.799,12.47' fill='#FFFFFF' fill-rule='evenodd'></path>
<path clip-rule='evenodd' d='M10.35,43.279c0.969-1.016,1.885-1.977,2.76-2.893    c0.213,0.369,0.376,0.762,0.639,1.072c0.265,0.312,0.627,0.539,0.98,0.832c-0.853,0.891-1.713,1.791-2.624,2.746    C11.513,44.445,10.939,43.869,10.35,43.279' fill='#FFFFFF' fill-rule='evenodd'></path>
</g>
</g>
</svg>
<!-- END ICON -->
</a>
</div>
<!-- Cisco | Talos logos -->
<div class='navigation-logos-wrapper'>
<div id='cisco-logo-wrapper'></div>
<div id='talos-logo-wrapper'>
<a href='https://www.talosintelligence.com'>
<!-- TALOS LOGO -->
<!-- Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->
<svg id='Layer_1' style='enable-background:new 0 0 3361.3 912.4;' version='1.1' viewBox='0 0 3361.3 912.4' x='0px' xml:space='preserve' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' y='0px'>
<style type='text/css'>
	.st0{display:none;}
	.ukraine_yellow{fill:#FCB83D;}
	.ukraine_blue{fill:#006DB6;}
</style>
<g class='st0' id='scaffold'>
</g>
<g>
<path class='ukraine_yellow' d='M1342.8,795.4c-0.1-20.7-0.2-41.3-0.2-62c-0.1-62.8-0.3-125.6-0.3-188.5c0-29.8-0.1-59.7-0.1-89.5h-97.5   c0,53.5-0.2,106.9-0.7,160.4c-0.1,10-1.4,20.4-4.1,30c-8.3,29.8-25.9,51.8-56.5,60.6c-10.4,3-21.6,4.3-32.5,4.4   c-63.5,0.4-127,0.2-190.5,0.2c-5.8,0-11.7,0.2-17.5,0.7c-39.7,3.1-70.5-18.3-80.8-56.7c-8.2-30.7-4-60.6,8-89.4   c15.4-36.8,40.5-64.3,78.6-78.4c17.8-6.6,36.3-7.1,55.1-7c72.3,0.3,144.6,0,217,0c1.8,0,3.5,0,5.1,0c0-8.3,0-16.6,0-24.9H836.4   c-26.4,28-46,61.3-60,98.4c-15.9,42-16.3,86-8.5,130.1c4.3,24.7,13,47.5,29.9,66.6c28.1,31.8,64.5,46.6,106,48.6   c29.4,1.4,59,1.2,88.4,1.1c61-0.1,121.9,0,182.9-1.2c34-0.7,65.4-10,90.5-35.2c21.3,18.3,46.2,29.1,73.2,36.8h4   C1342.8,798.5,1342.8,797,1342.8,795.4z'></path>
<path class='ukraine_yellow' d='M465.1,793.9c0-112.8,0-225.6,0-338.4H359.4c0,81.4,0,162.7,0,244.1c0,25.8,7,49,25.5,67.9   c15.5,15.9,34.9,24.8,56.2,29.6c6.9,1.6,14,2.4,21.5,3.6h2.5C465.1,797.7,465.1,795.8,465.1,793.9z'></path>
<path class='ukraine_yellow' d='M2896.8,494.3c76.3,0.9,152.6,0.3,229,0.3c3.5,0,7,0.1,10.5,0.3c24,1.3,39.4,17.8,39.6,42.1   c0.2,27.5,0.8,55,0.9,82.5c0.1,13,0.6,26.1-1.1,38.9c-3.4,25.2-25.5,43.4-50.8,43.5c-47.7,0.1-95.3,0.2-143,0.2   c-55.5,0-111,0.1-166.5-0.1c-7.5,0-13.9,1.6-20.3,5.3c-34.2,19.6-61.1,45.9-76.7,82.7c-1.4,3.4-2.4,6.9-3.7,10.9h427.6   c5.5-0.2,11-0.7,16.4-1.4c70-9.3,107.2-69.5,112.1-115.8c1.4-13.2,0.4-26.6,0.4-39.9c-0.1-39.5-0.2-79-0.4-118.5   c-0.1-17.5-2.6-34.7-10.5-50.4c-3.5-6.9-7.3-13.3-11.5-19.1h-444.5C2828.2,482.4,2860.4,493.8,2896.8,494.3z'></path>
<polygon class='ukraine_yellow' points='3251.7,800.6 3251.7,776.9 3260.5,776.9 3260.5,771.4 3235.9,771.4 3235.9,776.9 3244.5,776.9    3244.5,800.6  '></polygon>
<polygon class='ukraine_yellow' points='3279.4,791.9 3272.8,771.4 3263.5,771.4 3263.5,800.6 3270.6,800.6 3270.6,794 3269.9,779.9    3277,800.6 3281.8,800.6 3288.9,779.9 3288.2,794 3288.2,800.6 3295.3,800.6 3295.3,771.4 3285.9,771.4  '></polygon>
<path class='ukraine_yellow' d='M2403.3,792.4c77.5-17.2,143.1-55.5,194.5-116.5c52.3-62.1,75.8-134.9,76.5-215.3c0-1.7,0-3.4,0-5.1h-133.2   c0,57,0,114.1,0,171.1c0,15.4-5.3,28.8-17.1,39c-11,9.6-24.5,12.4-38.6,12.4c-51,0-102-0.2-153-0.3c-54-0.1-108-0.2-162-0.1   c-2.4,0-5.5,1.4-7.2,3.2c-13.2,13.9-26.2,28-39.3,42c-1.8,1.9-3.5,3.8-5.4,5.9c1.9,1.7,3.4,3.1,5,4.2c6.2,4.5,12.2,9.3,18.7,13.3   c53,33,108.8,51.5,167.2,54.4h33.7C2362.9,799.7,2383,796.9,2403.3,792.4z'></path>
<path class='ukraine_yellow' d='M2118.4,646.5c-12.9,13.5-26.4,27.7-40.7,42.7c8.7,8.7,17.2,17.2,25.9,25.9c13.5-14.1,26.1-27.4,38.7-40.5   c-5.2-4.3-10.5-7.7-14.4-12.3C2123.9,657.7,2121.5,651.9,2118.4,646.5z'></path>
<path class='ukraine_yellow' d='M1584.6,455.5h-106.8c0,81.9,0,163.7,0,245.6c0,6.8,0.4,13.7,1.3,20.4c5.9,46.5,42.1,78.6,88.5,78.6   c144.6,0,289.3,0,433.9,0c1.7,0,3.5,0,5.5,0c-0.9-15.3-4.1-29.2-9.2-42.6c-14-36.3-41.2-60.8-86.9-60.5   c-94.1,0.5-188.3,0-282.4-0.1c-22.3,0-34-8.9-39.7-30.3c-4.7-17.6-4.2-35.6-4.2-53.6C1584.6,560.5,1584.6,508,1584.6,455.5z'></path>
<path class='ukraine_yellow' d='M1989.8,499.1c7.2,61.5,30.6,116.9,68,166.3c2.2,2.9,4.6,5.5,6.9,8.3c0.9-0.6,1.3-0.8,1.6-1.2   c15.9-17,31.9-34,47.7-51.2c1.3-1.4,1.8-3.8,1.9-5.8c0.1-14.3,0-28.7,0-43c0-39,0-78-0.1-117H1987   C1987.2,469.9,1988.1,484.4,1989.8,499.1z'></path>
</g>
<g>
<path class='ukraine_blue' d='M2804.2,455.5h444.5c-23.8-33-58.9-48.6-100.8-49.9c-68.6-2.2-137.3-1-205.9-1.2c-13.7-0.1-27.3,0-41-0.3   c-11.6-0.3-21.4-4.7-28.1-14.6c-5.6-8.4-8.8-17.5-8.1-27.8c2.7-39.9,5.2-79.8,8.2-119.7c1.1-14.5,7.2-27,18.5-36.5   c12.5-10.4,27.4-13.2,43-13.2c87.2,0,174.3-0.3,261.5,0.3c13.8,0.1,24.9-3.9,35.3-12c0.9-0.7,1.9-1.4,2.8-2.1   c20.6-16.7,32.5-37.9,33.8-65.4c-2,0-3.3,0-4.6,0c-62-0.2-124-0.5-185.9-0.8c-42.7-0.2-85.3-0.5-128-0.5c-17.3,0-34.8-0.3-51.9,1.7   c-40.6,4.7-73.8,23-96.5,57.8c-10.8,16.6-19.1,34.5-20.3,54.6c-2.8,44.9-5,89.8-7.7,134.7c-1.8,30.8,5.1,59.4,23.1,84.6   C2798.6,448.9,2801.4,452.3,2804.2,455.5z'></path>
<path class='ukraine_blue' d='M1226,455.5c0-22.1,0-44,0-66c-2.6,0-4.7,0-6.8,0c-81,0-162,0.1-243,0c-33.4,0-64.3,8.6-92.3,26.6   c-17.9,11.5-33.6,24.7-47.5,39.4H1226z'></path>
<path class='ukraine_blue' d='M1584.6,455.5c0-81.1,0-162.2-0.1-243.4c0-24.5-7.6-46.3-25.1-63.9c-22.3-22.3-50.3-31.4-81.7-34.8   c0,3,0,5.2,0,7.3c0,111.6,0,223.1,0,334.7H1584.6z'></path>
<path class='ukraine_blue' d='M184.3,197.1c17.7,1.4,35.6,0.9,53.4,1c29,0.1,58,0,87,0c9,0,17.3,2.5,23.3,9.6c7.3,8.6,11.4,18.4,11.4,30.1   c-0.1,72.6-0.1,145.2-0.1,217.8h105.7c0-71.5,0-143,0-214.5c0-4,0.3-8,1.2-11.9c4.1-18.4,17.1-30.5,33.9-30.7   c25.3-0.2,50.6,0.4,76,0.4c21.5,0,43.1,1.1,64.4-0.8c44.5-3.9,75.5-27.3,91.8-69.2c2.2-5.7,3.5-11.7,5.4-18   c-216.3,0-431.7,0-647.9,0c0.4,2.7,0.6,5,1.1,7.3C100.4,162.1,137,193.5,184.3,197.1z'></path>
<path class='ukraine_blue' d='M2541,293.1c0.1,54.1,0.1,108.2,0.1,162.4h133.2c-0.3-74.2-23.4-141.4-66.3-202.1c-5-7-10.6-13.6-16.1-20.7   c-15.9,16.9-31,33.3-46.4,49.4C2542.4,285.4,2541,288.6,2541,293.1z'></path>
<path class='ukraine_blue' d='M2115.8,455.5c0-57,0-113.9,0-170.9c0-30.1,22.5-52.5,52.5-52.5c103,0,205.9,0,308.9,0.1   c6.2,0,10.7-1,15.3-6.1c13.9-15.5,28.7-30.2,43.3-45.3c-0.4-0.7-0.5-1-0.8-1.2c-1.4-1.2-2.8-2.3-4.3-3.4   c-54.2-37.9-114.3-59.4-180.4-63.8c-50.8-3.4-99.9,5.4-147.2,23.9c-73.2,28.7-132,75.1-171.4,143.9   c-31.5,55.1-45.3,113.9-44.7,175.3H2115.8z'></path>
<path class='ukraine_blue' d='M2526.7,245.7c4.4,4.2,7.8,9.4,11.9,14.4c13.1-13.7,26-27.2,39.9-41.8c-9.2-8.5-17.8-16.6-26.8-25   c-13.7,14.3-26.6,27.8-39.5,41.3C2517.2,238.4,2522.4,241.6,2526.7,245.7z'></path>
<path class='ukraine_blue' d='M894.7,191.4c2.1,1.1,4.7,1.5,7.1,1.6c14.2,0.1,28.3,0.1,42.5,0.1c60-0.2,120-0.2,179.9-0.6   c19.7-0.1,38.8,1.8,57.1,9.8c39.5,17.4,62,46.6,62.5,90.8c0.5,46.3,0.8,92.6,0.8,138.9c0,7.8,0,15.7,0,23.5h97.5   c0-50.8-0.1-101.6-0.3-152.4c-0.1-14.5-1-29-3-43.3c-4.6-34.3-17.3-65.2-42-90.3c-22.6-22.9-50.6-36.4-81.1-45.2   c-34.4-9.9-69.7-13.4-105.2-13.6c-34-0.2-68,0.8-101.9,0.9c-53.8,0.2-107.6,0-161.5,0c-1.9,0-3.9,0-5.8,0c-0.2,1.2-0.3,1.7-0.3,2.1   C846.2,148.4,863.4,174.9,894.7,191.4z'></path>
</g>
</svg>
<!-- END TALOS LOGO -->
</a>
</div>
</div>
<!-- Main Site Navigation Links -->
<div class='navigation-links-wrapper'>
<ul class='main-nav-list'>
<!-- Sofware -->
<li class='nav-item '>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://www.talosintelligence.com/software'>
<!-- SOFTWARE ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='tools-icon'>
<path d='M24.7-0.062H1.3C0.583-0.062,0,0.521,0,1.241v17.393c0,0.721,0.583,1.304,1.3,1.304h23.4   c0.719,0,1.3-0.583,1.3-1.304V1.241C26,0.521,25.419-0.062,24.7-0.062z M23.604,13.027c-0.063,0.058-0.151,0.077-0.232,0.052   L20.2,12.104c-0.024-0.008-0.052,0.007-0.06,0.032l-0.806,2.62c-0.008,0.025,0.006,0.048,0.023,0.057l3.201,0.984   c0.08,0.024,0.142,0.091,0.161,0.172c0.02,0.082-0.006,0.169-0.067,0.227c-1.106,1.063-2.77,1.309-4.137,0.609   c-1.207-0.616-1.918-1.825-1.961-3.093L7.858,9.268C6.806,9.976,5.41,10.107,4.202,9.49C3.249,9.002,2.564,8.124,2.328,7.076   C2.309,6.994,2.335,6.907,2.398,6.85c0.062-0.058,0.149-0.078,0.231-0.053l3.172,0.975c0.025,0.008,0.052-0.006,0.06-0.032   l0.805-2.621C6.673,5.094,6.66,5.071,6.642,5.063L3.441,4.078C3.361,4.053,3.3,3.988,3.28,3.906   C3.26,3.824,3.286,3.737,3.347,3.679c1.108-1.063,2.77-1.308,4.138-0.609c1.207,0.618,1.918,1.826,1.961,3.093l8.697,4.445   c1.053-0.708,2.448-0.84,3.655-0.223c0.955,0.488,1.638,1.367,1.876,2.414C23.692,12.883,23.665,12.969,23.604,13.027z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Software</span>
</a>
</div>
</li>
<!-- Vulnerability Information -->
<li class='nav-item '>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://www.talosintelligence.com/vulnerability_info'>
<!-- VULNERABILITY INFO ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='vuln-icon'>
<path d='M24.256,18.49L13.872,0.503C13.692,0.192,13.36,0,13,0c-0.359,0-0.692,0.192-0.872,0.503L1.744,18.49  c-0.18,0.312-0.18,0.695,0,1.006C1.924,19.809,2.257,20,2.616,20h20.769c0.359,0,0.691-0.191,0.871-0.504  C24.436,19.186,24.436,18.803,24.256,18.49 M14.268,18.215h-2.533v-1.85h2.533V18.215z M14.268,15.441h-2.533L10.89,6.515h4.222  L14.268,15.441z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Vulnerability<span class='break'><br/></span> Information</span>
</a>
</div>
<input class='sub-nav-trigger' id='vuln-sub-trigger' type='checkbox'/>
<label class='sub-nav-trigger-label' for='vuln-sub-trigger'>
<!-- SUBNAVIGATION ICON -->
<svg height='47.75px' viewBox='0 0 48.167 47.75' width='48.167px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<circle cx='24.083' cy='23.875' fill='none' opacity='0.4' r='22' stroke='#FFFFFF' stroke-miterlimit='10'></circle>
<g>
<circle cx='24.083' cy='16.068' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='23.875' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='31.682' fill='#FFFFFF' r='2.496'></circle>
</g>
</svg>
<!-- END ICON -->
</label>
<ul class='sub-nav'>
<li class='desktop-hide'>
<a href='https://www.talosintelligence.com/vulnerability_info'>
<h1>Vulnerability Information</h1>
</a>
</li>
<li class='desktop-hide'><label class='subnav-back-button' for='vuln-sub-trigger'>BACK</label></li>
<li><a href='https://www.talosintelligence.com/vulnerability_reports'>Vulnerability Reports</a></li>
<li><a href='https://www.talosintelligence.com/ms_advisories'>Microsoft Advisories</a></li>
</ul>
<div class='desktop-hide subnav-overlay'>
<!-- VULNERABILITY INFO ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='vuln-icon'>
<path d='M24.256,18.49L13.872,0.503C13.692,0.192,13.36,0,13,0c-0.359,0-0.692,0.192-0.872,0.503L1.744,18.49  c-0.18,0.312-0.18,0.695,0,1.006C1.924,19.809,2.257,20,2.616,20h20.769c0.359,0,0.691-0.191,0.871-0.504  C24.436,19.186,24.436,18.803,24.256,18.49 M14.268,18.215h-2.533v-1.85h2.533V18.215z M14.268,15.441h-2.533L10.89,6.515h4.222  L14.268,15.441z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
</div>
</li>
<!-- Reputation Center -->
<li class='nav-item '>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://www.talosintelligence.com/reputation'>
<!-- REPUTATION CENTER ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='center-icon'>
<path d='M24.7,0H1.3C0.582,0,0,0.585,0,1.308v17.384C0,19.415,0.582,20,1.3,20h23.4c0.718,0,1.3-0.585,1.3-1.308   V1.308C26,0.585,25.418,0,24.7,0z M21.75,10.5h-1.9c-0.246,3.392-2.958,6.104-6.35,6.35v1.9h-1v-1.9   c-3.392-0.246-6.104-2.958-6.35-6.35h-1.9v-1h1.9c0.246-3.392,2.958-6.104,6.35-6.35v-1.9h1v1.9c3.392,0.246,6.104,2.958,6.35,6.35   h1.9V10.5z' fill='#9EA0A5'></path>
<path d='M18.85,9.5c-0.241-2.84-2.509-5.108-5.35-5.35v2.184h-1V4.15C9.66,4.392,7.392,6.66,7.15,9.5h2.184v1H7.15   c0.241,2.841,2.509,5.108,5.35,5.35v-2.184h1v2.184c2.841-0.241,5.108-2.509,5.35-5.35h-2.184v-1H18.85z M13,11.984   c-1.096,0-1.984-0.888-1.984-1.984c0-1.096,0.888-1.984,1.984-1.984c1.097,0,1.984,0.888,1.984,1.984   C14.984,11.097,14.097,11.984,13,11.984z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Reputation<span class='break'><br/></span> Center</span>
</a>
</div>
<input class='sub-nav-trigger' id='reputation-sub-trigger' type='checkbox'/>
<label class='sub-nav-trigger-label' for='reputation-sub-trigger'>
<!-- SUBNAVIGATION ICON -->
<svg height='47.75px' viewBox='0 0 48.167 47.75' width='48.167px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<circle cx='24.083' cy='23.875' fill='none' opacity='0.4' r='22' stroke='#FFFFFF' stroke-miterlimit='10'></circle>
<g>
<circle cx='24.083' cy='16.068' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='23.875' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='31.682' fill='#FFFFFF' r='2.496'></circle>
</g>
</svg>
<!-- END ICON -->
</label>
<ul class='sub-nav'>
<li class='desktop-hide'>
<a href='https://www.talosintelligence.com/reputation'>
<h1>Reputation Center</h1>
</a>
</li>
<li class='desktop-hide'><label class='subnav-back-button' for='reputation-sub-trigger'>BACK</label></li>
<li><a data-method='get' href='https://www.talosintelligence.com/reputation_center'>IP & Domain Reputation</a></li>
<li><a href='https://www.talosintelligence.com/talos_file_reputation'>Talos File Reputation</a></li>
<li><a href='https://www.talosintelligence.com/support'>Reputation Support</a></li>
<li><a href='https://www.talosintelligence.com/secure-endpoint-naming'>Secure Endpoint Naming Conventions</a></li>
<li><a href='https://www.talosintelligence.com/categories'>Intelligence Categories</a></li>
</ul>
<div class='desktop-hide subnav-overlay'>
<!-- REPUTATION CENTER ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='center-icon'>
<path d='M24.7,0H1.3C0.582,0,0,0.585,0,1.308v17.384C0,19.415,0.582,20,1.3,20h23.4c0.718,0,1.3-0.585,1.3-1.308   V1.308C26,0.585,25.418,0,24.7,0z M21.75,10.5h-1.9c-0.246,3.392-2.958,6.104-6.35,6.35v1.9h-1v-1.9   c-3.392-0.246-6.104-2.958-6.35-6.35h-1.9v-1h1.9c0.246-3.392,2.958-6.104,6.35-6.35v-1.9h1v1.9c3.392,0.246,6.104,2.958,6.35,6.35   h1.9V10.5z' fill='#9EA0A5'></path>
<path d='M18.85,9.5c-0.241-2.84-2.509-5.108-5.35-5.35v2.184h-1V4.15C9.66,4.392,7.392,6.66,7.15,9.5h2.184v1H7.15   c0.241,2.841,2.509,5.108,5.35,5.35v-2.184h1v2.184c2.841-0.241,5.108-2.509,5.35-5.35h-2.184v-1H18.85z M13,11.984   c-1.096,0-1.984-0.888-1.984-1.984c0-1.096,0.888-1.984,1.984-1.984c1.097,0,1.984,0.888,1.984,1.984   C14.984,11.097,14.097,11.984,13,11.984z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
</div>
</li>
<!-- Library -->
<li class='nav-item '>
<a class='primary_nav_link' href='https://www.talosintelligence.com/resources'>
<!-- LIBRARY ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='library-icon'>
<g>
<rect fill='#9EA0A5' height='0.882' width='5.438' x='7.389' y='9.446'></rect>
<rect fill='#9EA0A5' height='0.883' width='5.438' x='7.389' y='13.887'></rect>
<rect fill='#9EA0A5' height='0.882' width='5.438' x='7.389' y='7.226'></rect>
<rect fill='#9EA0A5' height='0.883' width='5.438' x='7.389' y='11.666'></rect>
<path d='M24.7,0H1.3C0.583,0,0,0.56,0,1.25v17.499C0,19.44,0.583,20,1.3,20h23.4c0.719,0,1.3-0.56,1.3-1.251V1.25    C26,0.56,25.419,0,24.7,0z M14.32,15.852c0,0.275-0.222,0.498-0.498,0.498H6.665c-0.274,0-0.497-0.223-0.497-0.498V6.144    c0-0.276,0.222-0.499,0.497-0.499h7.157c0.276,0,0.498,0.223,0.498,0.499V15.852z M19.832,13.564c0,0.273-0.222,0.496-0.497,0.496    h-3.768v-1.578h2.771V11.6h-2.771v-1.339h2.771V9.38h-2.771V8.041h2.771V7.159h-2.771V6.144c0-0.111-0.01-0.219-0.03-0.325h2.802    V4.938h-3.257c-0.318-0.332-0.764-0.54-1.26-0.54H11.68V3.856c0-0.275,0.222-0.499,0.498-0.499h7.158    c0.275,0,0.497,0.224,0.497,0.499V13.564z' fill='#9EA0A5'></path>
</g>
</g>
</svg>
<!-- END ICON -->
<span>Library</span>
</a>
</li>
<!-- Support -->
<li class='nav-item'>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://www.talosintelligence.com/community'>
<!-- SUPPORT ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='community-icon'>
<g>
<path d='M24.7-0.062H1.3C0.582-0.062,0,0.521,0,1.241v17.393c0,0.72,0.582,1.304,1.3,1.304h23.4    c0.718,0,1.3-0.584,1.3-1.304V1.241C26,0.521,25.418-0.062,24.7-0.062z M18.911,12.189c0,1.98-5.911,5.461-5.911,5.461    s-5.911-3.208-5.911-5.461c0-2.251,0-8.189,0-8.189L13,2.361L18.911,4C18.911,4,18.911,10.21,18.911,12.189z' fill='#9EA0A5'></path>
<polygon fill='#9EA0A5' points='9.671,8.763 8.275,10.16 11.77,13.655 13.166,12.259 17.726,7.699 16.384,6.357 11.824,10.917       '></polygon>
</g>
</g>
</svg>
<!-- END ICON -->
<span>Support</span>
</a>
</div>
<input class='sub-nav-trigger' id='community-sub-trigger' type='checkbox'/>
<label class='sub-nav-trigger-label' for='community-sub-trigger'>
<!-- SUBNAVIGATION ICON -->
<svg height='47.75px' viewBox='0 0 48.167 47.75' width='48.167px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<circle cx='24.083' cy='23.875' fill='none' opacity='0.4' r='22' stroke='#FFFFFF' stroke-miterlimit='10'></circle>
<g>
<circle cx='24.083' cy='16.068' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='23.875' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='31.682' fill='#FFFFFF' r='2.496'></circle>
</g>
</svg>
<!-- END ICON -->
</label>
<ul class='sub-nav'>
<li class='desktop-hide'>
<a href='https://www.talosintelligence.com/community'>
<h1>Support Communities</h1>
</a>
</li>
<li class='desktop-hide'><label class='subnav-back-button' for='community-sub-trigger'>BACK</label></li>
<li>
<a href='https://www.talosintelligence.com/reputation_center/support#reputation_center_support_ticket'>Reputation Center Support</a>
</li>
<li><a href='https://snort.org/community' target='_blank'>Snort Community</a></li>
<li><a href='https://www.clamav.net/contact.html#ml' target='_blank'>ClamAV Community</a></li>
<li><a href='https://www.spamcop.net/' target='_blank'>SpamCop</a></li>
</ul>
<div class='desktop-hide subnav-overlay'>
<!-- SUPPORT ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='community-icon'>
<g>
<path d='M24.7-0.062H1.3C0.582-0.062,0,0.521,0,1.241v17.393c0,0.72,0.582,1.304,1.3,1.304h23.4    c0.718,0,1.3-0.584,1.3-1.304V1.241C26,0.521,25.418-0.062,24.7-0.062z M18.911,12.189c0,1.98-5.911,5.461-5.911,5.461    s-5.911-3.208-5.911-5.461c0-2.251,0-8.189,0-8.189L13,2.361L18.911,4C18.911,4,18.911,10.21,18.911,12.189z' fill='#9EA0A5'></path>
<polygon fill='#9EA0A5' points='9.671,8.763 8.275,10.16 11.77,13.655 13.166,12.259 17.726,7.699 16.384,6.357 11.824,10.917       '></polygon>
</g>
</g>
</svg>
<!-- END ICON -->
</div>
</li>
<!-- Incident Response -->
<li class='nav-item '>
<a class='primary_nav_link' href='https://www.talosintelligence.com/incident_response'>
<!-- INCIDENT RESPONSE ICON -->
<svg height='20px' id='Layer_1' version='1.1' viewBox='0 0 26 20' width='26px' xml:space='preserve' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink'>
<g class='nav-icon' id='nav-ir-icon'>
<path d='M24.7,0H1.3C0.6,0,0,0.6,0,1.2v17.5C0,19.4,0.6,20,1.3,20h23.4c0.7,0,1.3-0.6,1.3-1.3V1.2   C26,0.6,25.5,0,24.7,0z M7.9,8.9c0-2.9,2.3-5.2,5.1-5.2s5.1,2.3,5.1,5.2v3.5H7.9V8.9z M20.2,15.8c0,0.3-0.2,0.5-0.5,0.5H6.4   c-0.3,0-0.5-0.2-0.5-0.5v-2.1c0-0.3,0.2-0.5,0.5-0.5h13.2c0.3,0,0.5,0.2,0.5,0.5V15.8z' fill='#9EA0A5'></path>
<path d='M13,5.2L13,5.2c-1.8,0-3.6,1.4-3.6,3.3c0,0.1,0,0.2,0.1,0.3c0.1,0.1,0.2,0.1,0.3,0.1s0.2,0,0.3-0.1   c0.1-0.1,0.1-0.2,0.1-0.3c0-1.3,1.4-2.4,2.7-2.4c0.1,0,0.2,0,0.3-0.1c0.1-0.1,0.1-0.2,0.1-0.3s0-0.2-0.1-0.3   C13.3,5.3,13.2,5.2,13,5.2z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Incident Response</span>
</a>
</li>
<!-- Careers -->
<li class='nav-item '>
<a class='primary_nav_link' href='https://www.talosintelligence.com/careers'>
<!-- CAREERS ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='career-icon'>
<path d='M24.7,0H1.3C0.582,0,0,0.559,0,1.25v17.499C0,19.44,0.582,20,1.3,20h23.4c0.719,0,1.3-0.56,1.3-1.251V1.25   C26,0.559,25.419,0,24.7,0z M4.047,13.736c-0.21-1.287-0.46-3.002-0.41-3.657c0.052-0.687,0.645-1.194,1.76-1.51   c0.278-0.08,0.562-0.139,0.815-0.184l0.104-0.554C5.774,7.357,5.404,6.46,5.404,5.68c0-1.124,0.767-2.037,1.713-2.037   c0.946,0,1.713,0.913,1.713,2.037c0,0.781-0.371,1.677-0.914,2.152l0.104,0.554C8.275,8.431,8.558,8.49,8.837,8.57   c0.427,0.121,0.777,0.27,1.05,0.447c-0.811,0.26-1.462,0.597-1.938,1.004c-0.606,0.52-0.956,1.182-1.012,1.913   c-0.029,0.385-0.002,0.988,0.08,1.803H4.047z M17.618,17.5H8.383c-0.317-1.938-0.692-4.516-0.617-5.502   c0.079-1.031,0.97-1.796,2.648-2.272c0.418-0.118,0.845-0.209,1.227-0.276l0.156-0.833c-0.817-0.715-1.373-2.062-1.373-3.238   c0-1.691,1.153-3.063,2.576-3.063c1.424,0,2.577,1.372,2.577,3.063c0,1.176-0.556,2.524-1.374,3.238L14.36,9.45   c0.382,0.067,0.808,0.158,1.227,0.276c1.679,0.476,2.569,1.241,2.648,2.272C18.311,12.984,17.937,15.562,17.618,17.5z    M21.953,13.736h-2.969c0.082-0.814,0.109-1.418,0.081-1.803c-0.057-0.73-0.406-1.393-1.013-1.913   c-0.476-0.407-1.127-0.745-1.938-1.004c0.272-0.177,0.623-0.326,1.05-0.447c0.279-0.08,0.562-0.139,0.816-0.184l0.104-0.554   c-0.542-0.475-0.913-1.372-0.913-2.152c0-1.124,0.767-2.037,1.713-2.037s1.713,0.913,1.713,2.037c0,0.781-0.369,1.677-0.912,2.152   l0.104,0.554c0.254,0.045,0.537,0.104,0.815,0.184c1.116,0.316,1.708,0.823,1.761,1.51C22.413,10.734,22.164,12.449,21.953,13.736z   ' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Careers</span>
</a>
</li>
<!-- Blog -->
<li class='nav-item active'>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://blog.talosintelligence.com/' id='link_blog'>
<!-- BLOG ICON -->
<svg height='22.25px' viewBox='0 0 26 22.25' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='blog-icon'>
<path d='M24.753,1.356h-2.501l-0.863-0.883C21.091,0.17,20.695,0.002,20.264,0c-0.415,0-0.808,0.16-1.104,0.45  l-0.926,0.906H1.249C0.562,1.356,0,1.917,0,2.604v15.384v0.082v0.568c0,0.717,0.582,1.299,1.3,1.299h15.602l5.297,2.211  l-0.686-2.211H24.7c0.718,0,1.3-0.582,1.3-1.299V18.07v-0.158V2.604C26,1.917,25.438,1.356,24.753,1.356z M6.031,14.773  l13.856-13.58c0.1-0.099,0.233-0.153,0.377-0.153c0.145,0.001,0.279,0.058,0.381,0.161l0.152,0.156l2.089,2.136  c0.102,0.104,0.154,0.24,0.152,0.383c-0.002,0.143-0.06,0.275-0.161,0.374L8.993,17.803l-4.14,1.086L6.031,14.773z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>Blog</span>
</a>
</div>
<input class='sub-nav-trigger' id='blog-sub-trigger' type='checkbox'/>
<label class='sub-nav-trigger-label' for='blog-sub-trigger'>
<!-- SUBNAVIGATION ICON -->
<svg height='47.75px' viewBox='0 0 48.167 47.75' width='48.167px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<circle cx='24.083' cy='23.875' fill='none' opacity='0.4' r='22' stroke='#FFFFFF' stroke-miterlimit='10'></circle>
<g>
<circle cx='24.083' cy='16.068' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='23.875' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='31.682' fill='#FFFFFF' r='2.496'></circle>
</g>
</svg>
<!-- END ICON -->
</label>
<ul class='sub-nav'>
<li class='desktop-hide'>
<a href='https://blog.talosintelligence.com/'>
<h1>Blog</h1>
</a>
</li>
<li class='desktop-hide'><label class='subnav-back-button' for='blog-sub-trigger'>BACK</label></li>
<li><a href="https://blog.talosintelligence.com/">Talos Blog</a></li>
<li><a href='https://www.talosintelligence.com/newsletters'>Talos Threat Source Newsletter</a></li>
</ul>
<div class='desktop-hide subnav-overlay'>
<!-- BLOG ICON -->
<svg height='22.25px' viewBox='0 0 26 22.25' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='blog-icon'>
<path d='M24.753,1.356h-2.501l-0.863-0.883C21.091,0.17,20.695,0.002,20.264,0c-0.415,0-0.808,0.16-1.104,0.45  l-0.926,0.906H1.249C0.562,1.356,0,1.917,0,2.604v15.384v0.082v0.568c0,0.717,0.582,1.299,1.3,1.299h15.602l5.297,2.211  l-0.686-2.211H24.7c0.718,0,1.3-0.582,1.3-1.299V18.07v-0.158V2.604C26,1.917,25.438,1.356,24.753,1.356z M6.031,14.773  l13.856-13.58c0.1-0.099,0.233-0.153,0.377-0.153c0.145,0.001,0.279,0.058,0.381,0.161l0.152,0.156l2.089,2.136  c0.102,0.104,0.154,0.24,0.152,0.383c-0.002,0.143-0.06,0.275-0.161,0.374L8.993,17.803l-4.14,1.086L6.031,14.773z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
</div>
</li>
<!-- Podcasts -->
<li class='nav-item'>
<div class='primary-link-wrapper'>
<a class='primary_nav_link' href='https://talosintelligence.com/podcasts'>
<!-- PODCAST ICON -->
<svg height='20px' id='Layer_1' style='enable-background:new 0 0 26 20;' version='1.1' viewBox='0 0 26 20' width='26px' x='0px' xml:space='preserve' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' y='0px'>
<path class='nav-icon' d='M24.7-0.1H1.3C0.6-0.1,0,0.5,0,1.2v17.4c0,0.7,0.6,1.3,1.3,1.3h23.4c0.7,0,1.3-0.6,1.3-1.3V1.2  C26,0.5,25.4-0.1,24.7-0.1z M9.8,5c0-1.8,1.5-3.2,3.2-3.2c1.8,0,3.2,1.5,3.2,3.2v5.8c0,1.8-1.5,3.2-3.2,3.2c-1.8,0-3.2-1.5-3.2-3.2  V5z M18.5,10.7c0,2.8-2.1,5.2-4.9,5.4V17h2.9c0.3,0,0.6,0.3,0.6,0.6s-0.3,0.6-0.6,0.6h-7c-0.3,0-0.6-0.3-0.6-0.6S9.1,17,9.5,17h2.9  v-0.9c-2.8-0.3-4.9-2.7-4.9-5.4V9.1c0-0.3,0.3-0.6,0.6-0.6s0.6,0.3,0.6,0.6v1.5c0,2.4,1.9,4.3,4.3,4.3s4.3-1.9,4.3-4.3V9.1  c0-0.3,0.3-0.6,0.6-0.6s0.6,0.3,0.6,0.6V10.7z' fill='#9EA0A5'></path>
</svg>
<!-- END ICON -->
<span>Podcasts</span>
</a>
</div>
<input class='sub-nav-trigger' id='podcast-sub-trigger' type='checkbox'/>
<label class='sub-nav-trigger-label' for='podcast-sub-trigger'>
<!-- SUBNAVIGATION ICON -->
<svg height='47.75px' viewBox='0 0 48.167 47.75' width='48.167px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<circle cx='24.083' cy='23.875' fill='none' opacity='0.4' r='22' stroke='#FFFFFF' stroke-miterlimit='10'></circle>
<g>
<circle cx='24.083' cy='16.068' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='23.875' fill='#FFFFFF' r='2.496'></circle>
<circle cx='24.083' cy='31.682' fill='#FFFFFF' r='2.496'></circle>
</g>
</svg>
<!-- END ICON -->
</label>
<ul class='sub-nav'>
<li class='desktop-hide'>
<a href='https://talosintelligence.com/podcasts'>
<h1>Podcasts</h1>
</a>
</li>
<li><a href='https://talosintelligence.com/podcasts/shows/beers_with_talos'>Beers with Talos</a></li>
<li><a href='https://talosintelligence.com/podcasts/shows/talos_takes'>Talos Takes</a></li>
</ul>
<div class='desktop-hide subnav-overlay'>
<!-- PODCAST ICON -->
<svg height='20px' id='Layer_1' style='enable-background:new 0 0 26 20;' version='1.1' viewBox='0 0 26 20' width='26px' x='0px' xml:space='preserve' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' y='0px'>
<path class='nav-icon' d='M24.7-0.1H1.3C0.6-0.1,0,0.5,0,1.2v17.4c0,0.7,0.6,1.3,1.3,1.3h23.4c0.7,0,1.3-0.6,1.3-1.3V1.2  C26,0.5,25.4-0.1,24.7-0.1z M9.8,5c0-1.8,1.5-3.2,3.2-3.2c1.8,0,3.2,1.5,3.2,3.2v5.8c0,1.8-1.5,3.2-3.2,3.2c-1.8,0-3.2-1.5-3.2-3.2  V5z M18.5,10.7c0,2.8-2.1,5.2-4.9,5.4V17h2.9c0.3,0,0.6,0.3,0.6,0.6s-0.3,0.6-0.6,0.6h-7c-0.3,0-0.6-0.3-0.6-0.6S9.1,17,9.5,17h2.9  v-0.9c-2.8-0.3-4.9-2.7-4.9-5.4V9.1c0-0.3,0.3-0.6,0.6-0.6s0.6,0.3,0.6,0.6v1.5c0,2.4,1.9,4.3,4.3,4.3s4.3-1.9,4.3-4.3V9.1  c0-0.3,0.3-0.6,0.6-0.6s0.6,0.3,0.6,0.6V10.7z' fill='#9EA0A5'></path>
</svg>
<!-- END ICON -->
</div>
</li>
<!-- About -->
<li class='nav-item '>
<a class='primary_nav_link' href='https://www.talosintelligence.com/about'>
<!-- ABOUT ICON -->
<svg height='20px' viewBox='0 0 26 20' width='26px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink'>
<g class='nav-icon' id='about-icon'>
<path d='M24.7-0.062H1.3C0.582-0.062,0,0.52,0,1.241v17.393c0,0.72,0.582,1.304,1.3,1.304h23.4   c0.718,0,1.3-0.584,1.3-1.304V1.241C26,0.52,25.418-0.062,24.7-0.062z M18.704,4.58c-0.318,0.335-0.616,0.647-0.918,0.961   c-0.092-0.115-0.172-0.233-0.272-0.332c-0.099-0.093-0.218-0.166-0.334-0.254c0.296-0.31,0.594-0.621,0.908-0.951   C18.294,4.198,18.494,4.384,18.704,4.58z M6.876,15.064c-0.053-0.062-0.109-0.125-0.16-0.189c-0.861-1.139-1.398-2.413-1.564-3.83   c-0.208-1.776,0.066-3.474,0.963-5.04c0.906-1.584,2.262-2.652,3.947-3.312c1.089-0.428,2.219-0.63,3.391-0.552   c1.519,0.102,2.904,0.596,4.152,1.469c0.035,0.025,0.068,0.052,0.101,0.08c0.005,0.003,0.008,0.012,0.019,0.027   c-0.337,0.349-0.679,0.686-0.998,1.043c-0.105,0.12-0.209,0.142-0.353,0.142c-2.37-0.003-4.741-0.003-7.112-0.003   c-0.692,0-1.208,0.516-1.208,1.208c-0.001,2.211,0,4.419,0,6.628c0,0.33,0.003,0.66,0.001,0.99c0,0.046-0.014,0.102-0.042,0.134   c-0.364,0.395-0.731,0.786-1.098,1.179C6.907,15.046,6.896,15.052,6.876,15.064z M7.174,15.424   c0.329-0.346,0.642-0.672,0.938-0.983c0.072,0.125,0.128,0.259,0.217,0.363c0.09,0.107,0.213,0.184,0.333,0.283   C8.373,15.39,8.08,15.696,7.771,16.02C7.569,15.819,7.375,15.623,7.174,15.424z M19.151,15.117   c-1.184,1.403-2.693,2.287-4.479,2.683c-2.144,0.477-4.15,0.094-6.011-1.064c-0.149-0.091-0.288-0.203-0.43-0.307   c-0.037-0.026-0.07-0.059-0.115-0.098c0.044-0.046,0.083-0.092,0.125-0.136c0.301-0.323,0.599-0.646,0.904-0.966   c0.039-0.041,0.109-0.073,0.165-0.073c1.244-0.003,2.486,0,3.729,0.002c1.174,0.003,2.348,0.007,3.523,0.007   c0.325,0,0.636-0.066,0.891-0.286c0.27-0.235,0.392-0.542,0.392-0.897c0.002-2.56,0.002-5.119-0.001-7.678   c-0.001-0.105,0.029-0.179,0.101-0.252c0.354-0.373,0.705-0.75,1.07-1.139c0.127,0.164,0.257,0.315,0.372,0.476   c1.011,1.43,1.543,3.016,1.525,4.771C20.896,12.011,20.354,13.688,19.151,15.117z' fill='#9EA0A5'></path>
</g>
</svg>
<!-- END ICON -->
<span>About</span>
</a>
</li>
<!-- Mobile Only Sign in area -->
<li class='acct_links desktop-hide'>
<a class='login-button' href='https://talosintelligence.com/users/auth/saml'>Cisco Login</a>
</li>
</ul>
</div>
</div>
</nav>
<!-- MOBILE NAVIGATION TRIGGER -->
<input class='nav-trigger' id='nav-trigger' type='checkbox'/>
<label for='nav-trigger'>
<!-- NAVIGATION MENU ICON -->
<svg height='16px' viewBox='0 0 22 16' width='22px' x='0px' xmlns='https://www.w3.org/2000/svg' xmlns:xlink='https://www.w3.org/1999/xlink' y='0px'>
<g id='menu-icon'>
<path d='M20.5,3h-19C0.672,3,0,2.329,0,1.5S0.672,0,1.5,0h19C21.328,0,22,0.671,22,1.5S21.328,3,20.5,3z' fill='#FFFFFF'></path>
<path d='M20.5,9.5h-19C0.672,9.5,0,8.828,0,8c0-0.829,0.672-1.5,1.5-1.5h19C21.328,6.5,22,7.171,22,8   C22,8.828,21.328,9.5,20.5,9.5z' fill='#FFFFFF'></path>
<path d='M20.5,16h-19C0.672,16,0,15.328,0,14.5S0.672,13,1.5,13h19c0.828,0,1.5,0.672,1.5,1.5S21.328,16,20.5,16z' fill='#FFFFFF'></path>
</g>
</svg>
<!-- END ICON -->
</label>
<!-- END OF NAVIGATION / BEGINNING OF PAGE CONTENT -->
<div id='page_wrapper'>
<div class='container-fluid full-height'>
<div class='row full-height'>
<div class='col-xs-12 col_single'>
<div class='row'>
<div class='col-xs-12 publication' id='content-wrapper'>
<div id='main-wrapper'>
<div class='main section' id='main'><div class='widget Blog' data-version='1' id='Blog1'>
<div class='blog-posts hfeed'>
<!--Can't find substitution for tag [defaultAdStart]-->

                        <div class="date-outer">
                      
<h2 class='date-header'><span>Wednesday, June 6, 2018</span></h2>

                        <div class="date-posts">
                      
<div class='post-outer'>
<div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='https://schema.org/BlogPosting'>
<meta content='https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s640/image2.jpg' itemprop='image_url'/>
<meta content='1029833275466591797' itemprop='blogId'/>
<meta content='5913788946872943043' itemprop='postId'/>
<a name='5913788946872943043'></a>
<h3 class='post-title entry-title' itemprop='name'>
VPNFilter Update - VPNFilter exploits endpoints, targets new devices
</h3>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<div class='post-body entry-content' id='post-body-5913788946872943043' itemprop='description articleBody'>
<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s1600/image2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="381" data-original-width="1200" height="202" src="https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s640/image2.jpg" width="640" /></a></div>
<span style="color: red; font-size: 16px; font-weight: bold;"><br /></span>
</div>
<br />
<br />
<h2>
Introduction</h2>
<br />
<br />
Cisco Talos, while working with our various intelligence partners, has discovered additional details regarding "<a href="https://blog.talosintelligence.com/2018/05/VPNFilter.html">VPNFilter</a>." In the days since we first published our findings on the campaign, we have seen that VPNFilter is targeting more makes/models of devices than initially thought, and has additional capabilities, including the ability to deliver exploits to endpoints. Talos recently published a blog about a <a href="https://blog.talosintelligence.com/2018/05/VPNFilter.html">broad campaign</a> that delivered VPNFilter to small home-office network devices, as well as network-attached storage devices. As we stated in that post, our research into this threat was, and is, ongoing. In the wake of that post, we have had a number of partners step forward with additional information that has assisted us in our work. This post is an update of our findings over the past week.<br />
<br />
First, we have determined that additional devices are being targeted by this actor, including some from vendors that are new to the target list. These new vendors are ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE. New devices were also discovered from Linksys, MikroTik, Netgear, and TP-Link. Our research currently shows that no Cisco network devices are affected. We've provided an updated device list below.<br />
<br />
We have also discovered a new stage 3 module that injects malicious content into web traffic as it passes through a network device. At the time of our initial posting, we did not have all of the information regarding the suspected stage 3 modules. The new module allows the actor to deliver exploits to endpoints via a man-in-the-middle capability (e.g. they can intercept network traffic and inject malicious code into it without the user's knowledge). With this new finding, we can confirm that the threat goes beyond what the actor could do on the network device itself, and extends the threat into the networks that a compromised network device supports. We provide technical details on this module, named "ssler" below.<br />
<br />
Additionally, we've discovered an additional stage 3 module that provides any stage 2 module that lacks the kill command the capability to disable the device. When executed, this module specifically removes traces of the VPNFilter malware from the device and then renders the device unusable. Analysis of this module, called "dstr," is also provided below.<br />
<br />
Finally, we've conducted further research into the stage 3 packet sniffer, including in-depth analysis of how it looks for Modbus traffic.<br />
<br />
<a name='more'></a><h3 id="h.oc873qq32tn">
Technical details</h3>
<h4>
New third-stage modules</h4>
<br />
<br />
'ssler' (Endpoint exploitation module &#8212; JavaScript injection)<br />
<br />
The ssler module, which we pronounce as "Esler," provides data exfiltration and JavaScript injection capabilities by intercepting all traffic passing through the device destined for port 80. This module is expected to be executed with a parameter list, which determines the module's behavior and which websites should be targeted. The first positional parameter controls the folder on the device where stolen data should be stored. The purpose of the other named parameters are as follows:<br />
<br />
<ul>
<li>
dst: &#8212; Used by the iptables rules created to specify a destination IP address or CIDR range that the rule should apply to.</li>
<li>
src: &#8212; Used by the iptables rules created to specify a source IP address or CIDR range that the rule should apply to. </li>
<li>
dump: &#8212; Any domain passed in a dump parameter will have all of its HTTP headers recorded in the reps_*.bin file.</li>
<li>
site: &#8212; When a domain is provided in the "site" parameter, this domain will have its web pages targeted for JavaScript injection.</li>
<li>
hook: &#8212; This parameter determines the URL of the JavaScript file for injection.</li>
</ul>
<br />
<br />
The first action taken by the ssler module is to configure the device's iptables to redirect all traffic destined for port 80 to its local service listening on port 8888. It starts by using the insmod command to insert three iptables modules into the kernel (ip_tables.ko, iptable_filter.ko, iptable_nat.ko) and then executes the following shell commands:<br />
<br />
<ul>
<li>
iptables -I INPUT -p tcp --dport 8888 -j ACCEPT</li>
<li>
iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8888</li>
<li>
Example: ./ssler logs src:192.168.201.0/24 dst:10.0.0.0/16</li>
</ul>
-A PREROUTING -s 192.168.201.0/24 -d 10.0.0.0/16 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8888<br />
<br />
Note: To ensure that these rules do not get removed, ssler deletes them and then adds them back approximately every four minutes.<br />
<br />
Any outgoing web requests on port 80 are now intercepted by ssler and can be inspected and manipulated before being sent to the legitimate HTTP service. All HTTP requests are sslstripped. That is, the following changes are made to requests before being sent to the true HTTP server: <br />
<br />
<ul>
<li>
Any instances of the string https:// are replaced with http://, converting requests for secure HTTP resources to requests for insecure ones so sensitive data such as credentials can be extracted from them.</li>
<li>
If the request contains the header Connection: keep-alive, it is replaced with Connection: close</li>
<li>
If the request contains the header Accept-Encoding with the gzip value, this is converted to Accept-Encoding: plaintext/none so no responses will be compressed with gzip (exceptions are made for certain file types, such as images).</li>
</ul>
<br />
<br />
If the host is in one of the dump: parameters, the details of the request are saved to the disk for exfiltration, including the URL, port and all of the request headers. If the host is not in a dump: parameter, it will only dump requests with an Authorization header or URLs that have credentials in them. URLs are determined to have credentials if they contain either the string assword= or ass= and one of the following strings in them:<br />
<br />
<ul>
<li>
sername=</li>
<li>
ser=</li>
<li>
ame=</li>
<li>
ogin=</li>
<li>
ail=</li>
<li>
hone=</li>
<li>
session%5Busername</li>
<li>
session%5Bpassword</li>
<li>
session[password</li>
</ul>
<br />
<br />
Any POST requests to accounts.google.com containing the string signin will also be dumped.<br />
<br />
After these modifications are made, a connection to the true HTTP server is made by ssler using the modified request data over port 80. Ssler receives the response from the HTTP server and makes the following changes to the response before passing it on to the victim:<br />
<br />
<ul>
<li>
A response with an https:// in its Location header value is converted to http://</li>
<li>
The following headers are ignored, i.e. not sent to the client:</li>
<ul>
<li>Alt-Scv</li>
<li>Vary</li>
<li>Content-MD5</li>
<li>content-security-policy</li>
<li>X-FB-Debug</li>
<li>public-key-pins-report-only</li>
<li>Access-Control-Allow-Origin</li>
</ul>
<li>
The entire response is sslstripped &#8212; that is, all instances of https:// with \x20http://.</li>
<li>
If parameter site: is provided a domain (or part of a domain, e.g. "google"), it will attempt to inject JavaScript into all Content-Type: text/html or Content-Type: text/javascript responses. The requirement is that the string &lt;meta name= &#8230; &gt; be present and long enough to fit the string from the hook: parameter.  The &lt;meta name= &#8230; &gt; tag will be replaced with &lt;script type="text/javascript" src="[hook value]"&gt;. The victim IP combined with the site is then added to an internal whitelist in ssler and will not be targeted for injection again until the whitelist is cleared (which occurs every four days).</li>
</ul>
<ul>
</ul>
<br />
Each domain that is sslstripped in the responses (e.g. domains found in links) is then added to a list of stripped domains. Subsequent requests that are intercepted by the ssler module to domains in this list will occur via HTTPS over port 443, instead of HTTP over port 80. By default, four domains are on this list, so ssler will always connect to these domains via HTTPS over port 443: www.google.com, twitter.com, www.facebook.com, or www.youtube.com.<br />
<br />
'dstr' (device destruction module)<br />
<br />
The dstr modules are used to render an infected device inoperable by deleting files necessary for normal operation. It deletes all files and folders related to its own operation first before deleting the rest of the files on the system, possibly in an attempt to hide its presence during a forensic analysis.  <br />
<br />
The x86 version of the dstr module was analyzed in-depth. This module first deleted itself from the disk and then stops the execution of the parent Stage 2 process. It will then search all running process for ones named vpnfilter, security, and tor and terminate them. Next, it explicitly deletes the following files and directories:<br />
<br />
<ul>
<li>
/var/tmp/client_ca.crt</li>
<li>
/var/tmp/client.key</li>
<li>
/var/tmp/client.crt</li>
<li>
/var/run/vpnfilterm/htpx</li>
<li>
/var/run/vpnfilter</li>
<li>
/var/run/vpn.tmp</li>
<li>
/var/run/vpn.pid</li>
<li>
/var/run/torrc</li>
<li>
/var/run/tord/hidden_ssh/private_key</li>
<li>
/var/run/tord/hidden_ssh/hostname</li>
<li>
/var/run/tor</li>
<li>
/var/run/msvf.pid</li>
<li>
/var/run/client_ca.crt</li>
<li>
/var/run/client.key</li>
<li>
/var/run/client.crt</li>
<li>
/var/pckg/mikrotik.o</li>
<li>
/var/pckg/.mikrotik.</li>
<li>
/var/msvf.pid</li>
<li>
/var/client_ca.crt</li>
<li>
/var/client.key</li>
<li>
/var/client.crt</li>
<li>
/tmp/client_ca.crt</li>
<li>
/tmp/client.key</li>
<li>
/tmp/client.crt</li>
<li>
/flash/nova/etc/loader/init.x3</li>
<li>
/flash/nova/etc/init/security</li>
<li>
/flash/nova/etc/devel-login</li>
<li>
/flash/mikrotik.o</li>
<li>
/flash/.mikrotik.</li>
<li>
/var/run/vpnfilterw/</li>
<li>
/var/run/vpnfilterm/</li>
<li>
/var/run/tord/hidden_ssh/</li>
<li>
/var/run/tord/</li>
<li>
/flash/nova/etc/loader/</li>
<li>
/flash/nova/etc/init/</li>
</ul>
<br />
<br />
The dstr module clears flash memory by overwriting the bytes of all available /dev/mtdX devices with a 0xFF byte. Finally, the shell command rm -rf /* is executed to delete the remainder of the file system and the device is rebooted. At this point, the device will not have any of the files it needs to operate and fail to boot.<br />
<br />
Additional research on the third stage packet sniffer<br />
<br />
'ps' (stage 3 packet sniffer)<br />
<br />
One of stage 3 packet sniffer module samples we have is the R600VPN MIPS-like (Lexra architecture) sample. This sample is a packet sniffer that is looking for basic authentication as well as monitoring ICS traffic, and is specific to the TP-LINK R600-VPN. The malware uses a raw socket to look for connections to a pre-specified IP address, only looking at TCP packets that are 150 bytes or larger (note: This is the full packet size, with headers. Depending on the size of the TCP header, the PDU could be approximately 56 to 96 bytes and still meet the criteria to get logged). It has the ability to view, but not modify, the network traffic. Very significant changes would be required to implement functionality that could modify traffic.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-tZ0TlApZBf8/WxfRiVFZY5I/AAAAAAAAAi8/xnk3tL0wY2oSoHx6RpCphkRlu6h5iUcywCLcBGAs/s1600/image1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1600" data-original-width="674" src="https://2.bp.blogspot.com/-tZ0TlApZBf8/WxfRiVFZY5I/AAAAAAAAAi8/xnk3tL0wY2oSoHx6RpCphkRlu6h5iUcywCLcBGAs/s1600/image1.jpg" /></a></div>
<br />
<br />
Packets that are not on port 502, are scanned for BasicAuth, and that information is logged.<br />
<br />
<ul>
<li>
Else: (non-Modbus traffic): sniffing HTTP basic auth credentials</li>
</ul>
<ul>
<ul>
<li>
Destination IP Address == command line argument IP address</li>
<li>
Source port &gt; 1024</li>
<li>
Source port != 8080</li>
<li>
Source port != 8088</li>
<li>
Packet Data length &gt; 20 bytes</li>
<li>
Packet does not contain </li>
</ul>
</ul>
<ul>
<ul><ul>
<li>
&lt;/ and &gt;</li>
<li>
&lt;?xml</li>
<li>
Basic Og==</li>
<li>
/tmUnblock.cgi</li>
<li>
Password Required</li>
<li>
&lt;div</li>
<li>
&lt;form</li>
<li>
&lt;input</li>
<li>
this. and .get</li>
<li>
{</li>
<li>
}</li>
<li>
200 OK</li>
<li>
&lt;span</li>
<li>
&lt;SPAN</li>
<li>
&lt;DIV</li>
</ul>
</ul>
</ul>
<ul>
<ul>
<li>
Packet contains 'Authorization: Basic' OR one user/pass combination </li>
</ul>
</ul>
<ul>
<ul><ul>
<li>
User</li>
</ul>
</ul>
</ul>
<ul>
<ul><ul><ul>
<li>
User=</li>
<li>user=</li>
<li>
Name=</li>
<li>
name=</li>
<li>
Usr=</li>
<li>
usr=</li>
<li>
Login=</li>
<li>
login=</li>
</ul>
</ul>
</ul>
</ul>
<ul>
<ul><ul>
<li>
Pass</li>
</ul>
</ul>
</ul>
<ul>
<ul><ul><ul>
<li>
Pass=</li>
<li>
pass=</li>
<li>
Password=</li>
<li>
password=</li>
<li>
Passwd=</li>
<li>
passwd=</li>
</ul>
</ul>
</ul>
</ul>
<br />
<br />
<ul>
<li>
Logging: Logs on IPs and ports, but not the packet contents on port 502. It does not validate the traffic as Modbus.</li>
</ul>
<ul>
<ul>
<li>
Modbus - Logs SourceIP, SourcePort, DestinationIP, DestinationPort and labels it *modbus*</li>
<li>
All Other - write full packet to log file if and only if it passes basic auth check</li>
</ul>
</ul>
<br />
<h3 id="h.ssvvq0zhr557">
Conclusion</h3>
<br />
These new discoveries have shown us that the threat from VPNFilter continues to grow. In addition to the broader threat surface found with additional targeted devices and vendors, the discovery of the malware's capability to support the exploitation of endpoint devices expands the scope of this threat beyond the devices themselves, and into the networks those devices support. If successful, the actor would be able to deploy any desired additional capability into the environment to support their goals, including rootkits, exfiltration capability and destructive malware.<br />
<br />
Talos would like to thank all of the individual researchers, companies and intelligence partners from around the world who have stepped forward to share information and address this threat.  Your actions have helped us gain a greater understanding of this campaign, and in some cases, have directly improved the situation. We recognize this is a team sport, and truly appreciate your assistance.<br />
<br />
We will continue to monitor VPNFilter and work with our partners to understand the threat as it continues to evolve in order to ensure that our customers remain protected and the public is informed.<br />
<br />
<h3 id="h.36boiglbyi43">
Updated List of IOCs</h3>
<br />
As stated previously, we highly suspect that there are additional IOCs and versions of this malware that we are not currently aware of. The following list of IOCs comprises what we know as of this date. News IOCs are in BOLD below.<br />
<br />
<h3>
Known C2 Domains and IPs</h3>
<br />
<br />
<h4>
Associated with the 1st Stage</h4>
<br />
<br />
photobucket[.]com/user/nikkireed11/library<br />
photobucket[.]com/user/kmila302/library<br />
photobucket[.]com/user/lisabraun87/library<br />
photobucket[.]com/user/eva_green1/library<br />
photobucket[.]com/user/monicabelci4/library<br />
photobucket[.]com/user/katyperry45/library<br />
photobucket[.]com/user/saragray1/library<br />
photobucket[.]com/user/millerfred/library<br />
photobucket[.]com/user/jeniferaniston1/library<br />
photobucket[.]com/user/amandaseyfried1/library<br />
photobucket[.]com/user/suwe8/library<br />
photobucket[.]com/user/bob7301/library<br />
toknowall[.]com<br />
<br />
<h4>
Associated with the 2nd Stage</h4>
<br />
<br />
91.121.109[.]209<br />
217.12.202[.]40<br />
94.242.222[.]68<br />
82.118.242[.]124<br />
46.151.209[.]33<br />
217.79.179[.]14<br />
91.214.203[.]144<br />
95.211.198[.]231<br />
195.154.180[.]60<br />
5.149.250[.]54<br />
94.185.80[.]82<br />
62.210.180[.]229<br />
91.200.13[.]76<br />
23.111.177[.]114<br />
<br />
6b57dcnonk2edf5a[.]onion/bin32/update.php<br />
tljmmy4vmkqbdof4[.]onion/bin32/update.php<br />
zuh3vcyskd4gipkm[.]onion/bin32/update.php<br />
4seiwn2ur4f65zo4.onion/bin256/update.php<br />
zm3lznxn27wtzkwa.onion/bin16/update.php<br />
<br />
<h3>
Known File Hashes</h3>
<br />
<br />
<h4>
1st Stage Malware</h4>
<br />
<br />
50ac4fcd3fbc8abcaa766449841b3a0a684b3e217fc40935f1ac22c34c58a9ec<br />
0e0094d9bd396a6594da8e21911a3982cd737b445f591581560d766755097d92<br />
b9770ec366271dacdae8f5088218f65a6c0dd82553dd93f41ede586353986124<br />
51e92ba8dac0f93fc755cb98979d066234260eafc7654088c5be320f431a34fa<br />
6a76e3e98775b1d86b037b5ee291ccfcffb5a98f66319175f4b54b6c36d2f2bf<br />
313d29f490619e796057d50ba8f1d4b0b73d4d4c6391cf35baaaace71ea9ac37<br />
<br />
<h4>
2nd Stage Malware</h4>
<br />
9683b04123d7e9fe4c8c26c69b09c2233f7e1440f828837422ce330040782d17<br />
d6097e942dd0fdc1fb28ec1814780e6ecc169ec6d24f9954e71954eedbc4c70e<br />
4b03288e9e44d214426a02327223b5e516b1ea29ce72fa25a2fcef9aa65c4b0b<br />
9eb6c779dbad1b717caa462d8e040852759436ed79cc2172692339bc62432387<br />
37e29b0ea7a9b97597385a12f525e13c3a7d02ba4161a6946f2a7d978cc045b4<br />
776cb9a7a9f5afbaffdd4dbd052c6420030b2c7c3058c1455e0a79df0e6f7a1d<br />
8a20dc9538d639623878a3d3d18d88da8b635ea52e5e2d0c2cce4a8c5a703db1<br />
0649fda8888d701eb2f91e6e0a05a2e2be714f564497c44a3813082ef8ff250b<br />
2ffbe27983bc5c6178b2d447d8121cefaa5ffa87fe7b9e4f68272ce54787492f<br />
1e741ec9452aab85a2f7d8682ef4e553cd74892e629012d903b521b21e3a15bf<br />
90efcaeac13ef87620bcaaf2260a12895675c74d0820000b3cd152057125d802<br />
eaf879370387a99e6339377a6149e289655236acc8de88324462dcd0f22383ff<br />
081e72d96b750a38ef45e74d0176beb982905af4df6b8654ea81768be2f84497<br />
24b3931e7d0f65f60bbb49e639b2a4c77de83648ff08e097ff0fa6a53f5c7102<br />
4497af1407d33faa7b41de0c4d0741df439d2e44df1437d8e583737a07ec04a1<br />
579b2e6290c1f7340795e42d57ba300f96aef035886e80f80cd5d0bb4626b5fc<br />
eeb3981771e448b7b9536ba5d7cd70330402328a884443a899696a661e4e64e5<br />
952f46c5618bf53305d22e0eae4be1be79329a78ad7ec34232f2708209b2517c<br />
e70a8e8b0cd3c59cca8a886caa8b60efb652058f50cc9ff73a90bc55c0dc0866<br />
5be57b589e5601683218bb89787463ca47ce3b283d8751820d30eee5e231678c<br />
fe46a19803108381d2e8b5653cc5dce1581a234f91c555bbfff63b289b81a3dc<br />
ae1353e8efe25b277f52decfab2d656541ffdf7fd10466d3a734658f1bc1187a<br />
2ef0e5c66f6d46ddef62015ea786b2e2f5a96d94ab9350dd1073d746b6922859<br />
181408e6ce1a215577c1daa195e0e7dea1fe9b785f9908b4d8e923a2a831fce8<br />
2aa7bc9961b0478c552daa91976227cfa60c3d4bd8f051e3ca7415ceaeb604ca<br />
375ededc5c20af22bdc381115d6a8ce2f80db88a5a92ebaa43c723a3d27fb0d6<br />
0424167da27214cf2be0b04c8855b4cdb969f67998c6b8e719dd45b377e70353<br />
7e5dca90985a9fac8f115eaacd8e198d1b06367e929597a3decd452aaa99864b<br />
8de0f244d507b25370394ba158bd4c03a7f24c6627e42d9418fb992a06eb29d8<br />
7ee215469a7886486a62fea8fa62d3907f59cf9bf5486a5fe3a0da96dabea3f9<br />
ff70462cb3fc6ddd061fbd775bbc824569f1c09425877174d43f08be360b2b58<br />
f5d06c52fe4ddca0ebc35fddbbc1f3a406bdaa5527ca831153b74f51c9f9d1b0<br />
bc51836048158373e2b2f3cdb98dc3028290e8180a4e460129fef0d96133ea2e<br />
d9a60a47e142ddd61f6c3324f302b35feeca684a71c09657ddb4901a715bd4c5<br />
95840bd9a508ce6889d29b61084ec00649c9a19d44a29aedc86e2c34f30c8baf<br />
3bbdf7019ed35412ce4b10b7621faf42acf604f91e5ee8a903eb58bde15688ff<br />
9b455619b4cbfeb6496c1246ba9ce0e4ffa6736fd536a0f99686c7e185eb2e22<br />
bfd028f78b546eda12c0d5d13f70ab27dff32b04df3291fd46814f486ba13693<br />
a15b871fcb31c032b0e0661a2d3dd39664fa2d7982ff0dbc0796f3e9893aed9a<br />
d1bc07b962ccc6e3596aa238bb7eda13003ea3ca95be27e8244e485165642548<br />
eec5cd045f26a7b5d158e8289838b82e4af7cf4fc4b9048eaf185b5186f760db<br />
29ae3431908c99b0fff70300127f1db635af119ee55cd8854f6d3270b2e3032e<br />
ca0bb6a819506801fa4805d07ee2ebaa5c29e6f5973148fe25ed6d75089c06a7<br />
6d8877b17795bb0c69352da59ce8a6bfd7257da30bd0370eed8428fad54f3128<br />
5cf43c433fa1e253e937224254a63dc7e5ad6c4b3ab7a66ec9db76a268b4deeb<br />
a6e3831b07ab88f45df9ffac0c34c4452c76541c2acd215de8d0109a32968ace<br />
f4f0117d2784a3b8dfef4b5cb7f2583dd4100c32f9ee020f16402508e073f0a1<br />
7093cc81f32c8ce5e138a4af08de6515380f4f23ed470b89e6613bee361159e1<br />
350eaa2310e81220c409f95e6e1e53beadec3cffa3f119f60d0daace35d95437<br />
776cb9a7a9f5afbaffdd4dbd052c6420030b2c7c3058c1455e0a79df0e6f7a1d<br />
d2de662480783072b82dd4d52ab6c57911a1e84806c229f614b26306d5981d98<br />
c8a82876beed822226192ea3fe01e3bd1bb0838ab13b24c3a6926bce6d84411b<br />
f30a0fe494a871bd7d117d41025e8d2e17cd545131e6f27d59b5e65e7ab50d92<br />
8a20dc9538d639623878a3d3d18d88da8b635ea52e5e2d0c2cce4a8c5a703db1<br />
0649fda8888d701eb2f91e6e0a05a2e2be714f564497c44a3813082ef8ff250b<br />
2c2412e43f3fd24d766832f0944368d4632c6aa9f5a9610ab39d23e79756e240<br />
218233cc5ef659df4f5fdabe028ab43bc66451b49a6bfa85a5ed436cfb8dbc32<br />
cccbf9bff47b3fd391274d322076847a3254c95f95266ef06a3ca8be75549a4b<br />
ab789a5a10b4c4cd7a0eb92bbfcf2cc50cb53066838a02cfb56a76417de379c5<br />
4896f0e4bc104f49901c07bc84791c04ad1003d5d265ab7d99fd5f40ec0b327f<br />
5e715754e9da9ed972050513b4566fb922cd87958ecf472d1d14cd76923ae59a<br />
797e31c6c34448fbecda10385e9ccfa7239bb823ac8e33a4a7fd1671a89fe0f6<br />
48bfcbc3162a0b00412cba5eff6c0376e1ae4cfbd6e35c9ea92d2ab961c90342<br />
7a66d65fa69b857beeeaaef67ec835900eee09a350b6f51f51c83919c9223793<br />
b0edf66d4f07e5f58b082f5b8479d48fbab3dbe70eba0d7e8254c8d3a5e852ef<br />
840ba484395e15782f436a7b2e1eec2d4bf5847dfd5d4787ae64f3a5f668ed4f<br />
80c20db74c54554d9936a627939c3c7ea44316e7670e2f7f5231c0db23bc2114<br />
5dabbce674b797aaa42052b501fb42b20be74d9ffcb0995d933fbf786c438178<br />
055bbe33c12a5cdaf50c089a29eaecba2ccf312dfe5e96183b810eb6b95d6c5a<br />
c084c20c94dbbffed76d911629796744eff9f96d24529b0af1e78cda54cdbf02<br />
5f6ee521311e166243d3e65d0253d12d1506750c80cd21f6a195be519b5d697f<br />
fcb6ff6a679ca17d9b36a543b08c42c6d06014d11002c09ba7c38b405b50debe<br />
a168d561665221f992f51829e0b282eeb213b8aca3a9735dbbaecc4d699f66b9<br />
98112bd4710e6ffe389a2beb13ff1162017f62a1255c492f29238626e99509f3<br />
afacb38ea3a3cafe0f8dbd26dee7de3d0b24cdecae280a9b884fbad5ed195de7<br />
b431aebc2783e72be84af351e9536e8110000c53ebb5db25e89021dc1a83625e<br />
2b39634dce9e7bb36e338764ef56fd37be6cd0faa07ee3673c6e842115e3ceb1<br />
11533eedc1143a33c1deae105e1b2b2f295c8445e1879567115adebfdda569e2<br />
36e3d47f33269bef3e6dd4d497e93ece85de77258768e2fa611137fa0de9a043<br />
e6c5437e8a23d50d44ee47ad6e7ce67081e7926a034d2ac4c848f98102ddb2f8<br />
1cb3b3e652275656b3ae824da5fb330cccd8b27892fb29adc96e5f6132b98517<br />
ec88fe46732d9aa6ba53eed99e4d116b7444afd2a52db988ea82f883f6d30268<br />
99944ad90c7b35fb6721e2e249b76b3e8412e7f35f6f95d7fd3a5969eaa99f3d<br />
8505ece4360faf3f454e5b47239f28c48d61c719b521e4e728bc12d951ecf315<br />
dd88273437031498b485c380968f282d09c9bd2373ef569952bc7496ebadadde<br />
6e7bbf25ea4e83229f6fa6b2fa0f880dde1594a7bec2aac02ff7d2d19945d036<br />
f989df3aeede247a29a1f85fc478155b9613d4a416428188eda1a21bd481713a<br />
4af2f66d7704de6ff017253825801c95f76c28f51f49ee70746896df307cbc29<br />
ba9fee47dcc7bad8a7473405aabf587e5c8d396d5dd5f6f8f90f0ff48cc6a9ce<br />
5d94d2b5f856e5a1fc3a3315d3cd03940384103481584b80e9d95e29431f5f7a<br />
33d6414dcf91b9a665d38faf4ae1f63b7aa4589fe04bdd75999a5e429a53364a<br />
14984efdd5343c4d51df7c79fd6a2dfd791aa611a751cc5039eb95ba65a18a54<br />
879be2fa5a50b7239b398d1809e2758c727e584784ba456d8b113fc98b6315a2<br />
c0cfb87a8faed76a41f39a4b0a35ac6847ffc6ae2235af998ee1b575e055fac2<br />
fc9594611445de4a0ba30daf60a7e4dec442b2e5d25685e92a875aca2c0112c9<br />
81cbe57cd80b752386ee707b86f075ad9ab4b3a97f951d118835f0f96b3ae79d<br />
4e022e4e4ee28ae475921c49763ee620b53bf11c2ad5fffe018ad09c3cb078cc<br />
a3cf96b65f624c755b46a68e8f50532571cee74b3c6f7e34eecb514a1eb400cf<br />
ff471a98342bafbab0d341e0db0b3b9569f806d0988a5de0d8560b6729875b3e<br />
638957e2def5a8fda7e3efefff286e1a81280d520d5f8f23e037c5d74c62553c<br />
4ffe074ad2365dfb13c1c9ce14a5e635b19acb34a636bae16faf9449fb4a0687<br />
4c596877fa7bb7ca49fb78036b85f92b581d8f41c5bc1fa38476da9647987416<br />
49a0e5951dbb1685aaa1a6d2acf362cbf735a786334ca131f6f78a4e4c018ed9<br />
0dc1e3f36dc4835db978a3175a462aa96de30df3e5031c5d0d8308cdd60cbede<br />
e74ae353b68a1d0f64b9c8306b2db46dfc760c1d91bfdf05483042d422bff572<br />
00c9bbc56388e3fffc6e53ef846ad269e7e31d631fe6068ff4dc6c09fb40c48b<br />
c2bcde93227eb1c150e555e4590156fe59929d3b8534a0e2c5f3b21ede02afa0<br />
70c271f37dc8c3af22fdcad96d326fe3c71b911a82da31a992c05da1042ac06d<br />
ffb0e244e0dabbaabf7fedd878923b9b30b487b3e60f4a2cf7c0d7509b6963ba<br />
dbede977518143bcee6044ed86b8178c6fc9d454fa346c089523eedee637f3be<br />
4d6cbde39a81f2c62d112118945b5eeb1d73479386c962ed3b03d775e0dccfa0<br />
fa229cd78c343a7811cf8314febbc355bb9baab05b270e58a3e5d47b68a7fc7d<br />
4beba775f0e0b757ff32ee86782bf42e997b11b90d5a30e5d65b45662363ece2<br />
a41da0945ca5b5f56d5a868d64763b3a085b7017e3568e6d49834f11952cb927<br />
f3d0759dfab3fbf8b6511a4d8b5fc087273a63cbb96517f0583c2cce3ff788b8<br />
fa4b286eeaf7d74fe8f3fb36d80746e18d2a7f4c034ae6c3fa4c917646a9e147<br />
be3ddd71a54ec947ba873e3e10f140f807e1ae362fd087d402eff67f6f955467<br />
6449aaf6a8153a9ccbcef2e2738f1e81c0d06227f5cf4823a6d113568f305d2a<br />
39dc1aded01daaf01890db56880f665d6cafab3dea0ac523a48aa6d6e6346fff<br />
01d51b011937433568db646a5fa66e1d25f1321f444319a9fba78fd5efd49445<br />
099a0b821f77cb4a6e6d4a641ed52ee8fea659ee23b657e6dae75bb8ca3418c3<br />
4cbf9ecb6ca4f2efed86ba6ebf49436c65afe7ae523ec9dae58e432a9d9a89d0<br />
66a98ad0256681313053c46375cb5c144c81bf4b206aaa57332eb5f1f7176b8c<br />
97d00fc2bc5f5c9a56b498cf83b7a801e2c11c056772c5308ee7adea50556309<br />
9e854d40f22675a0f1534f7c31626fd3b67d5799f8eea4bd2e2d4be187d9e1c7<br />
a125b3e627ecd04d0dd8295e12405f2590144337481eb21086c4afb337c5b3f2<br />
a7d154eaee39ff856792d86720a8d193da3d73bfe4ac8364da030d80539e9ac2<br />
b2dd77af9dd9e8d7d4ebc778f00ff01c53b860a04c4e0b497f2ae74bb8a280c0<br />
<br />
<h4>
3rd Stage Plugins </h4>
<br />
<br />
f8286e29faa67ec765ae0244862f6b7914fcdde10423f96595cb84ad5cc6b344<br />
afd281639e26a717aead65b1886f98d6d6c258736016023b4e59de30b7348719<br />
acf32f21ec3955d6116973b3f1a85f19f237880a80cdf584e29f08bd12666999<br />
47f521bd6be19f823bfd3a72d851d6f3440a6c4cc3d940190bdc9b6dd53a83d6<br />
d09f88baf33b901cc8a054d86879b81a81c19be45f8e05484376c213f0eedda2<br />
2af043730b632d237964dd6abd24a7f6db9dc83aab583532a1238b4d4188396b<br />
4bfc43761e2ddb65fedab520c6a17cc47c0a06eda33d11664f892fcf08995875<br />
cd8cf5e6a40c4e87f6ee40b9732b661a228d87d468a458f6de231dd5e8de3429<br />
bad8a5269e38a2335be0a03857e65ff91620a4d1e5211205d2503ef70017b69c<br />
ff118edb9312c85b0b7ff4af1fc48eb1d8c7c8da3c0e1205c398d2fe4a795f4b<br />
6807497869d9b4101c335b1688782ab545b0f4526c1e7dd5782c9deb52ee3df4<br />
3df17f01c4850b96b00e90c880fdfabbd11c64a8707d24488485dd12fae8ec85<br />
1367060db50187eca00ad1eb0f4656d3734d1ccea5d2d62f31f21d4f895e0a69<br />
94eefb8cf1388e431de95cab6402caa788846b523d493cf8c3a1aa025d6b4809<br />
78fee8982625d125f17cf802d9b597605d02e5ea431e903f7537964883cf5714<br />
3bd34426641b149c40263e94dca5610a9ecfcbce69bfdd145dff1b5008402314<br />
<br />
<h4>
Self-Signed Certificate Fingerprints</h4>
<br />
<br />
d113ce61ab1e4bfcb32fb3c53bd3cdeee81108d02d3886f6e2286e0b6a006747<br />
c52b3901a26df1680acbfb9e6184b321f0b22dd6c4bb107e5e071553d375c851<br />
f372ebe8277b78d50c5600d0e2af3fe29b1e04b5435a7149f04edd165743c16d<br />
be4715b029cbd3f8e2f37bc525005b2cb9cad977117a26fac94339a721e3f2a5<br />
27af4b890db1a611d0054d5d4a7d9a36c9f52dffeb67a053be9ea03a495a9302<br />
110da84f31e7868ad741bcb0d9f7771a0bb39c44785055e6da0ecc393598adc8<br />
fb47ba27dceea486aab7a0f8ec5674332ca1f6af962a1724df89d658d470348f<br />
b25336c2dd388459dec37fa8d0467cf2ac3c81a272176128338a2c1d7c083c78<br />
cd75d3a70e3218688bdd23a0f618add964603736f7c899265b1d8386b9902526<br />
110da84f31e7868ad741bcb0d9f7771a0bb39c44785055e6da0ecc393598adc8<br />
909cf80d3ef4c52abc95d286df8d218462739889b6be4762a1d2fac1adb2ec2b<br />
044bfa11ea91b5559f7502c3a504b19ee3c555e95907a98508825b4aa56294e4<br />
c0f8bde03df3dec6e43b327378777ebc35d9ea8cfe39628f79f20b1c40c1b412<br />
8f1d0cd5dd6585c3d5d478e18a85e7109c8a88489c46987621e01d21fab5095d<br />
d5dec646c957305d91303a1d7931b30e7fb2f38d54a1102e14fd7a4b9f6e0806<br />
c0f8bde03df3dec6e43b327378777ebc35d9ea8cfe39628f79f20b1c40c1b412<br />
<br />
<h3>
Known Affected Devices</h3>
<br />
<br />
The following devices are known to be affected by this threat. Based on the scale of this research, much of our observations are remote and not on the device, so it is difficult to determine specific version numbers and models in many cases. <br />
<br />
Given our observations with this threat, we assess that this list may still be incomplete and other devices may be affected.<br />
<br />
<h4>
Asus Devices:</h4>
<b>RT-AC66U (new)</b><br />
<b>RT-N10 (new)</b><br />
<b>RT-N10E (new)</b><br />
<b>RT-N10U (new)</b><br />
<b>RT-N56U (new)</b><br />
<b>RT-N66U (new)</b><br />
<br />
<h4>
D-Link Devices:</h4>
<b>DES-1210-08P (new)</b><br />
<b>DIR-300 (new)</b><br />
<b>DIR-300A (new)</b><br />
<b>DSR-250N (new)</b><br />
<b>DSR-500N (new)</b><br />
<b>DSR-1000 (new)</b><br />
<b>DSR-1000N (new)</b><br />
<br />
<h4>
Huawei Devices:</h4>
<b>HG8245 (new)</b><br />
<br />
<h4>
Linksys Devices:</h4>
E1200<br />
E2500<br />
<b>E3000 (new)</b><br />
<b>E3200 (new)</b><br />
<b>E4200 (new)</b><br />
<b>RV082 (new)</b><br />
WRVS4400N<br />
<br />
<h4>
Mikrotik Devices:</h4>
<b>CCR1009 (new)</b><br />
CCR1016<br />
CCR1036<br />
CCR1072<br />
<b>CRS109 (new)</b><br />
<b>CRS112 (new)</b><br />
<b>CRS125 (new)</b><br />
<b>RB411 (new)</b><br />
<b>RB450 (new)</b><br />
<b>RB750 (new)</b><br />
<b>RB911 (new)</b><br />
<b>RB921 (new)</b><br />
<b>RB941 (new)</b><br />
<b>RB951 (new)</b><br />
<b>RB952 (new)</b><br />
<b>RB960 (new)</b><br />
<b>RB962 (new)</b><br />
<b>RB1100 (new)</b><br />
<b>RB1200 (new)</b><br />
<b>RB2011 (new)</b><br />
<b>RB3011 (new)</b><br />
<b>RB Groove (new)</b><br />
<b>RB Omnitik (new)</b><br />
<b>STX5 (new)</b><br />
<br />
<br />
<br />
<h4>
Netgear Devices:</h4>
<b>DG834 (new)</b><br />
<b>DGN1000 (new)</b><br />
DGN2200<br />
<b>DGN3500 (new)</b><br />
<b>FVS318N (new)</b><br />
<b>MBRN3000 (new)</b><br />
R6400<br />
R7000<br />
R8000<br />
WNR1000<br />
WNR2000<br />
<b>WNR2200 (new)</b><br />
<b>WNR4000 (new)</b><br />
<b>WNDR3700 (new)</b><br />
<b>WNDR4000 (new)</b><br />
<b>WNDR4300 (new)</b><br />
<b>WNDR4300-TN (new)</b><br />
<b>UTM50 (new)</b><br />
<br />
<h4>
QNAP Devices:</h4>
TS251<br />
TS439 Pro<br />
Other QNAP NAS devices running QTS software<br />
<br />
<h4>
TP-Link Devices:</h4>
R600VPN<br />
<b>TL-WR741ND (new)</b><br />
<b>TL-WR841N (new)</b><br />
<br />
<h4>
Ubiquiti Devices:</h4>
<b>NSM2 (new)</b><br />
<b>PBE M5 (new)</b><br />
<br />
<h4>
Upvel Devices:</h4>
<b>Unknown Models* (new)</b><br />
<br />
<h4>
ZTE Devices:</h4>
<b>ZXHN H108N (new)</b><br />
<br />
* Malware targeting Upvel as a vendor has been discovered, but we are unable to determine which specific device it is targeting.<br />
<br />
<div style='clear: both;'></div>
</div>
<div class='post-footer'>
<div class='post-footer-line post-footer-line-1'>
<span class='post-author vcard'>
Posted by
<span class='fn' itemprop='author' itemscope='itemscope' itemtype='https://schema.org/Person'>
<meta content='https://www.blogger.com/profile/12206979422726316011' itemprop='url'/>
<a class='g-profile' href='https://www.blogger.com/profile/12206979422726316011' rel='author' title='author profile'>
<span itemprop='name'>William Largent</span>
</a>
</span>
</span>
<span class='post-timestamp'>
at
<meta content='http://blog.talosintelligence.com/2018/06/vpnfilter-update.html' itemprop='url'/>
<a class='timestamp-link' href='https://blog.talosintelligence.com/2018/06/vpnfilter-update.html' rel='bookmark' title='permanent link'><abbr class='published' itemprop='datePublished' title='2018-06-06T09:02:00-04:00'>9:02 AM</abbr></a>
</span>
<span class='reaction-buttons'>
</span>
<span class='post-comment-link'>
</span>
<span class='post-backlinks post-comment-link'>
</span>
<span class='post-icons'>
<span class='item-control blog-admin pid-401639434'>
<a href='https://www.blogger.com/post-edit.g?blogID=1029833275466591797&postID=5913788946872943043&from=pencil' title='Edit Post'>
<img alt='' class='icon-action' height='18' src='https://img2.blogblog.com/img/icon18_edit_allbkg.gif' width='18'/>
</a>
</span>
</span>
<div class='post-share-buttons goog-inline-block'>
</div>
</div>
<div class='post-footer-line post-footer-line-2'>
<span class='post-labels'>
Labels:
<a href='https://blog.talosintelligence.com/search/label/AMP' rel='tag'>AMP</a>,
<a href='https://blog.talosintelligence.com/search/label/ClamAV' rel='tag'>ClamAV</a>,
<a href='https://blog.talosintelligence.com/search/label/IoT' rel='tag'>IoT</a>,
<a href='https://blog.talosintelligence.com/search/label/iot%20malware' rel='tag'>iot malware</a>,
<a href='https://blog.talosintelligence.com/search/label/new%20router%20malware' rel='tag'>new router malware</a>,
<a href='https://blog.talosintelligence.com/search/label/office%20router%20attack' rel='tag'>office router attack</a>,
<a href='https://blog.talosintelligence.com/search/label/Snort%20Rules' rel='tag'>Snort Rules</a>,
<a href='https://blog.talosintelligence.com/search/label/Talos' rel='tag'>Talos</a>,
<a href='https://blog.talosintelligence.com/search/label/threat%20intelligence' rel='tag'>threat intelligence</a>,
<a href='https://blog.talosintelligence.com/search/label/Threat%20Research' rel='tag'>Threat Research</a>,
<a href='https://blog.talosintelligence.com/search/label/vpn%20filter%20attack' rel='tag'>vpn filter attack</a>,
<a href='https://blog.talosintelligence.com/search/label/VPNFilter' rel='tag'>VPNFilter</a>,
<a href='https://blog.talosintelligence.com/search/label/VPNFilter%20malware' rel='tag'>VPNFilter malware</a>,
<a href='https://blog.talosintelligence.com/search/label/vulnerable%20routers' rel='tag'>vulnerable routers</a>
</span>
</div>
<div class='post-footer-line post-footer-line-3'>
<div style='text-align: left;'>
<div class='social-media-share'>
<div class='social-call'><span>Share This Post</span></div>
<a class='facebook' data-text='VPNFilter Update - VPNFilter exploits endpoints, targets new devices' href='https://www.facebook.com/sharer.php?u=https://blog.talosintelligence.com/2018/06/vpnfilter-update.html&text=VPNFilter Update - VPNFilter exploits endpoints, targets new devices' rel='nofollow' target='_blank' title='Share This On Facebook'>
<img alt='Facebook share' border='0' src='https://www.talosintelligence.com/assets/icon_fb-share_grey.svg'/>
</a>
<a class='twitter' data-text='VPNFilter Update - VPNFilter exploits endpoints, targets new devices' href='https://twitter.com/share?url=https://blog.talosintelligence.com/2018/06/vpnfilter-update.html&text=VPNFilter Update - VPNFilter exploits endpoints, targets new devices' rel='nofollow' target='_blank' title='Tweet This'>
<img alt='Twitter share' border='0' src='https://www.talosintelligence.com/assets/icon_tw-share_grey.svg'/>
</a>
<a class='linkedin' data-text='VPNFilter Update - VPNFilter exploits endpoints, targets new devices' href='https://www.linkedin.com/sharing/share-offsite/?url=https://blog.talosintelligence.com/2018/06/vpnfilter-update.html&text=VPNFilter Update - VPNFilter exploits endpoints, targets new devices' rel='nofollow' target='_blank' title='Share This On Linkedin'>
<img alt='Linkedin share' border='0' src='https://www.talosintelligence.com/assets/icon_li-share_grey.svg'/>
</a>
<a class='reddit' data-text='VPNFilter Update - VPNFilter exploits endpoints, targets new devices' href='https://www.reddit.com/submit?url=https://blog.talosintelligence.com/2018/06/vpnfilter-update.html&title=VPNFilter Update - VPNFilter exploits endpoints, targets new devices' rel='nofollow' target='_blank' title='Reddit This'>
<img alt='Reddit share' border='0' src='https://www.talosintelligence.com/assets/icon_re-share_grey.svg'/>
</a>
<a href='mailto:?body=https://blog.talosintelligence.com/2018/06/vpnfilter-update.html&subject=VPNFilter Update - VPNFilter exploits endpoints, targets new devices'>
<img alt='Email This' border='0' src='https://www.talosintelligence.com/assets/icon_em-share_grey.svg'/>
</a>
</div>
</div>
<span class='post-location'>
</span>
</div>
</div>
</div>
<div class='comments' id='comments'>
<a name='comments'></a>
<h4>No comments:</h4>
<div id='Blog1_comments-block-wrapper'>
<dl class='' id='comments-block'>
</dl>
</div>
<p class='comment-footer'>
<div class='comment-form'>
<a name='comment-form'></a>
<h4 id='comment-post-message'>Post a Comment</h4>
<p>
</p>
<p>Note: Only a member of this blog may post a comment.</p>
<a href='https://www.blogger.com/comment/frame/1029833275466591797?po=5913788946872943043&hl=en' id='comment-editor-src'></a>
<iframe allowtransparency='true' class='blogger-iframe-colorize blogger-comment-from-post' frameborder='0' height='410' id='comment-editor' name='comment-editor' src='' width='100%'></iframe>
<!--Can't find substitution for tag [post.friendConnectJs]-->
<script src='https://www.blogger.com/static/v1/jsbin/157798655-comment_from_post_iframe.js' type='text/javascript'></script>
<script type='text/javascript'>
                    BLOG_CMT_createIframe('https://www.blogger.com/rpc_relay.html');
                  </script>
</div>
</p>
<div id='backlinks-container'>
<div id='Blog1_backlinks-container'>
</div>
</div>
</div>
</div>

                      </div></div>
                    
<!--Can't find substitution for tag [adEnd]-->
</div>
<div class='blog-pager' id='blog-pager'>
<span id='blog-pager-newer-link'>
<a class='blog-pager-newer-link' href='https://blog.talosintelligence.com/2018/06/ms-tuesday.html' id='Blog1_blog-pager-newer-link' title='Newer Post'>Newer Post</a>
</span>
<span id='blog-pager-older-link'>
<a class='blog-pager-older-link' href='https://blog.talosintelligence.com/2018/06/talos-threat-research-summit-guide-and.html' id='Blog1_blog-pager-older-link' title='Older Post'>Older Post</a>
</span>
<a class='home-link' href='https://blog.talosintelligence.com/'>Home</a>
</div>
<div class='clear'></div>
<div class='post-feeds'>
<div class='feed-links'>
Subscribe to:
<a class='feed-link' href='https://blog.talosintelligence.com/feeds/5913788946872943043/comments/default' target='_blank' type='application/atom+xml'>Post Comments (Atom)</a>
</div>
</div>
</div></div>
</div>
<div id='sidebar-wrapper'>
<div class='sidebar section' id='sidebar'><div class='widget HTML' data-version='1' id='HTML1'>
<div class='widget-content'>
<style>   
   
   #search {  
   /* Old browsers */
   background: #dedfe1;
   /* W3C, IE10+, FF16+, Chrome26+, Opera12+, Safari7+ */
   background: 
     url('https://www.talosintelligence.com/assets/icon_search.svg') 96% 50% no-repeat,
     linear-gradient(to right, #dedfe1 0%,#dedfe1 84%,#ef6f09 84%,#ef6f09 100%); 
   /* FF3.6-15 */
   background: 
     url('https://www.talosintelligence.com/assets/icon_search.svg') 96% 50% no-repeat,
     -moz-linear-gradient(left, #dedfe1 0%, #dedfe1 84%, #ef6f09 84%, #ef6f09 100%); 
   /* Chrome10-25,Safari5.1-6 */
   background: 
     url(https://www.talosintelligence.com/assets/icon_search.svg) 96% 50% no-repeat,
     -webkit-linear-gradient(left, #dedfe1 0%,#dedfe1 84%,#ef6f09 84%,#ef6f09 100%); 
   
   text-align: left;  
   padding: 8px 24px 6px 6px;  
   line-height: 1em;
   border-radius: 2px;
   height: 18px; 
   cursor: pointer;
   }  
   #search:focus {
    background-color: #fff;
    box-shadow: inset 0 0 2px 1px #ED6F09;
    outline: none;
   }
   #search #s {  
   background: none;  
   color: #303338; 
   font-family: verdana; 

   font-size: 11px;  
   border: 0;  
   width: 100%;  
   padding: 0;  
   margin: 0;  
   outline: none;  
   }  
   
   </style>  
   
   <div id="search" title="Type and hit enter"> 
<form action="/search" id="searchform" method="get"> 
<input id="s" name="q" type="text" placeholder="Search Blog" /> </form> </div>
</div>
<div class='clear'></div>
</div><div class='widget HTML' data-version='1' id='HTML2'>
<h2 class='title'>categories</h2>
<div class='widget-content'>
<div id="category_list"></div>

<script>
    (function () {
        //These categories MUST match the case of the label IN USE.
        var categories = ['Headlines', 'threats', 'vulnerabilities', 'Threat Roundup'];
        var cat_list = document.getElementById('category_list');
        var selected = [];
        function select_category(e){
            e.preventDefault();
            var cat_path = 'https://blog.talosintelligence.com/search/?q=';
            target = e.target;
            search_target = e.target.getAttribute('data-search');
            var cat_search = 'label:%22' + search_target.replace(/\s/g, '%20') + '%22';
            switch (e.shiftKey) {
                case true:
                    if ( selected.includes(cat_search) ){
                        var index = selected.indexOf(cat_search);
                        selected.splice(index, 1);
                        target.classList.remove('selected');
                    } else {
                        selected.push(cat_search);
                        target.classList.add('selected');
                    }
                    break;
                case false:
                    if (!selected.includes(cat_search)){
                        selected.push(cat_search);
                    }
                    var new_path = selected.join('||');
                    selected = [];
                    location.href = cat_path += new_path;
                    break;
            }
        }
        categories.forEach((cat)=>{
            var span = document.createElement('span');
            var cat_search = cat.replace(/\s/g, '%20');
            var button = document.createElement('button');
            var rss_image = document.createElement('img');
            var rss_a = document.createElement('a');
            button.addEventListener("click", select_category);
            button.innerHTML = cat;
            button.setAttribute('data-search', cat);
            rss_image.setAttribute('src', 'https://www.talosintelligence.com/assets/icon_rss_orange.svg');
            rss_image.setAttribute('align', 'absmiddle');
            rss_a.setAttribute('href', 'https://blog.talosintelligence.com/feeds/posts/default/-/' + cat_search);
            rss_a.setAttribute('title', cat + ' RSS feed');
            rss_image.classList.add('feed-icon');
            rss_a.append(rss_image);
            span.append(button);
            span.classList = "individual-category";
            span.append(rss_a);
            cat_list.append(span);
        });
    })();
</script>
</div>
<div class='clear'></div>
</div><div class='widget Subscribe' data-version='1' id='Subscribe1'>
<div style='white-space:nowrap'>
<h2 class='title'>Subscribe To Our Feed</h2>
<div class='widget-content'>
<div>
<div class='feed-reader-links subscribe'>
<a class='feed-reader-link' href='https://blog.talosintelligence.com/feeds/posts/default' target='_blank'>
<img align='absmiddle' class='feed-icon' src='https://www.talosintelligence.com/assets/icon_rss_orange.svg'/>
Posts
</a>
</div>
</div>
<div>
<div class='feed-reader-links subscribe'>
<a class='feed-reader-link' href='https://blog.talosintelligence.com/feeds/5913788946872943043/comments/default' target='_blank'>
<img align='absmiddle' class='feed-icon' src='https://www.talosintelligence.com/assets/icon_rss_orange.svg'/>
Comments
</a>
</div>
</div>
<div>
<div class='subscribe'>
<a class='feed-reader-link' href='https://www.talosintelligence.com/blog_subscription' onclick='window.open(&#39;https://www.talosintel.com/files/blog_files/email_subscription.html&#39;, &#39;popupwindow&#39;, &#39;scrollbars=yes,width=550,height=520&#39;);return true' target='popupwindow'>
<img align='absmiddle' class='feed-icon' src='https://www.talosintelligence.com/assets/icon_email_orange.svg'/>
										Subscribe via Email
                                    </a>
</div>
</div>
<div style='clear:both'></div>
</div>
</div>
<div class='clear'></div>
</div><div class='widget BlogArchive' data-version='1' id='BlogArchive1'>
<h2>Blog Archive</h2>
<div class='widget-content'>
<div id='ArchiveList'>
<div id='BlogArchive1_ArchiveList'>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/'>
2022
</a>
<span class='post-count' dir='ltr'>(93)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/05/'>
May
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/04/'>
April
</a>
<span class='post-count' dir='ltr'>(17)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/03/'>
March
</a>
<span class='post-count' dir='ltr'>(26)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/02/'>
February
</a>
<span class='post-count' dir='ltr'>(19)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2022/01/'>
January
</a>
<span class='post-count' dir='ltr'>(22)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/'>
2021
</a>
<span class='post-count' dir='ltr'>(291)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/12/'>
December
</a>
<span class='post-count' dir='ltr'>(15)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/11/'>
November
</a>
<span class='post-count' dir='ltr'>(28)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/10/'>
October
</a>
<span class='post-count' dir='ltr'>(23)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/09/'>
September
</a>
<span class='post-count' dir='ltr'>(25)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/08/'>
August
</a>
<span class='post-count' dir='ltr'>(25)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/07/'>
July
</a>
<span class='post-count' dir='ltr'>(27)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/06/'>
June
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/05/'>
May
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/04/'>
April
</a>
<span class='post-count' dir='ltr'>(29)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/03/'>
March
</a>
<span class='post-count' dir='ltr'>(26)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/02/'>
February
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2021/01/'>
January
</a>
<span class='post-count' dir='ltr'>(21)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/'>
2020
</a>
<span class='post-count' dir='ltr'>(272)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/12/'>
December
</a>
<span class='post-count' dir='ltr'>(22)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/11/'>
November
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/10/'>
October
</a>
<span class='post-count' dir='ltr'>(30)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/09/'>
September
</a>
<span class='post-count' dir='ltr'>(25)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/08/'>
August
</a>
<span class='post-count' dir='ltr'>(19)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/07/'>
July
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/06/'>
June
</a>
<span class='post-count' dir='ltr'>(22)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/05/'>
May
</a>
<span class='post-count' dir='ltr'>(23)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/04/'>
April
</a>
<span class='post-count' dir='ltr'>(23)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/03/'>
March
</a>
<span class='post-count' dir='ltr'>(21)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/02/'>
February
</a>
<span class='post-count' dir='ltr'>(29)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2020/01/'>
January
</a>
<span class='post-count' dir='ltr'>(22)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/'>
2019
</a>
<span class='post-count' dir='ltr'>(276)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/12/'>
December
</a>
<span class='post-count' dir='ltr'>(26)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/11/'>
November
</a>
<span class='post-count' dir='ltr'>(27)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/10/'>
October
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/09/'>
September
</a>
<span class='post-count' dir='ltr'>(27)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/08/'>
August
</a>
<span class='post-count' dir='ltr'>(21)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/07/'>
July
</a>
<span class='post-count' dir='ltr'>(22)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/06/'>
June
</a>
<span class='post-count' dir='ltr'>(16)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/05/'>
May
</a>
<span class='post-count' dir='ltr'>(25)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/04/'>
April
</a>
<span class='post-count' dir='ltr'>(25)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/03/'>
March
</a>
<span class='post-count' dir='ltr'>(24)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/02/'>
February
</a>
<span class='post-count' dir='ltr'>(19)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2019/01/'>
January
</a>
<span class='post-count' dir='ltr'>(20)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate expanded'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy toggle-open'>

                          &#9660;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/'>
2018
</a>
<span class='post-count' dir='ltr'>(198)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/12/'>
December
</a>
<span class='post-count' dir='ltr'>(16)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/11/'>
November
</a>
<span class='post-count' dir='ltr'>(15)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/10/'>
October
</a>
<span class='post-count' dir='ltr'>(26)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/09/'>
September
</a>
<span class='post-count' dir='ltr'>(16)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/08/'>
August
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/07/'>
July
</a>
<span class='post-count' dir='ltr'>(20)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate expanded'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy toggle-open'>

                          &#9660;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/06/'>
June
</a>
<span class='post-count' dir='ltr'>(15)</span>
<ul class='posts'>
<li><a href='https://blog.talosintelligence.com/2018/06/threat-roundup-0622-0629.html'>Threat Roundup for June 22-29</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/vmware-dos-vulnerability.html'>Vulnerability Spotlight: VMWare Workstation DoS Vu...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/beers-with-talos-ep-32-live-from.html'>Beers with Talos EP 32 - Live from Orlando Part 2:...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/ThanatosDecryptor.html'>Files Cannot Be Decrypted? Challenge Accepted. Tal...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/threat-roundup-0616-0622.html'>Threat Roundup for June 16-22</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/beers-with-talos-ep31-live-from-cisco.html'>Beers with Talos EP31 - Live from Cisco Live! - VP...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/my-little-formbook.html'>My Little FormBook</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/multiple-vuln-insteon.html'>Vulnerability Spotlight: Multiple Remote Vulnerabi...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/threat-roundup-0601-0615.html'>Threat Roundup for June 1-15</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/vulnerability-spotlight-talos-2018-0523.html'>Vulnerability Spotlight: TALOS-2018-0523-24 - Mult...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/vulnerability-spotlight-talos-2018-0545.html'>Vulnerability Spotlight: TALOS-2018-0545 - Microso...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/ms-tuesday.html'>Microsoft Patch Tuesday - June 2018</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/vpnfilter-update.html'>VPNFilter Update - VPNFilter exploits endpoints, t...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/talos-threat-research-summit-guide-and.html'>Talos Threat Research Summit Guide and Cisco Live ...</a></li>
<li><a href='https://blog.talosintelligence.com/2018/06/vulnerability-spotlight-talos-2018-0535.html'>Vulnerability Spotlight: TALOS-2018-0535 - Oculari...</a></li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/05/'>
May
</a>
<span class='post-count' dir='ltr'>(15)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/04/'>
April
</a>
<span class='post-count' dir='ltr'>(21)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/03/'>
March
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/02/'>
February
</a>
<span class='post-count' dir='ltr'>(14)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2018/01/'>
January
</a>
<span class='post-count' dir='ltr'>(18)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/'>
2017
</a>
<span class='post-count' dir='ltr'>(171)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/12/'>
December
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/11/'>
November
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/10/'>
October
</a>
<span class='post-count' dir='ltr'>(15)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/09/'>
September
</a>
<span class='post-count' dir='ltr'>(17)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/08/'>
August
</a>
<span class='post-count' dir='ltr'>(16)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/07/'>
July
</a>
<span class='post-count' dir='ltr'>(14)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/06/'>
June
</a>
<span class='post-count' dir='ltr'>(14)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/05/'>
May
</a>
<span class='post-count' dir='ltr'>(19)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/04/'>
April
</a>
<span class='post-count' dir='ltr'>(17)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/03/'>
March
</a>
<span class='post-count' dir='ltr'>(17)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/02/'>
February
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2017/01/'>
January
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/'>
2016
</a>
<span class='post-count' dir='ltr'>(99)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/12/'>
December
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/11/'>
November
</a>
<span class='post-count' dir='ltr'>(8)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/10/'>
October
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/09/'>
September
</a>
<span class='post-count' dir='ltr'>(8)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/08/'>
August
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/07/'>
July
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/06/'>
June
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/05/'>
May
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/04/'>
April
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/03/'>
March
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/02/'>
February
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2016/01/'>
January
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/'>
2015
</a>
<span class='post-count' dir='ltr'>(62)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/12/'>
December
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/11/'>
November
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/10/'>
October
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/09/'>
September
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/08/'>
August
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/07/'>
July
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/06/'>
June
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/05/'>
May
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/04/'>
April
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/03/'>
March
</a>
<span class='post-count' dir='ltr'>(8)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/02/'>
February
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2015/01/'>
January
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/'>
2014
</a>
<span class='post-count' dir='ltr'>(67)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/12/'>
December
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/11/'>
November
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/10/'>
October
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/09/'>
September
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/08/'>
August
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/07/'>
July
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/06/'>
June
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/05/'>
May
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/04/'>
April
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/03/'>
March
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/02/'>
February
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2014/01/'>
January
</a>
<span class='post-count' dir='ltr'>(8)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/'>
2013
</a>
<span class='post-count' dir='ltr'>(30)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/12/'>
December
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/11/'>
November
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/10/'>
October
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/09/'>
September
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/08/'>
August
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/07/'>
July
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/06/'>
June
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/05/'>
May
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/04/'>
April
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/03/'>
March
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/02/'>
February
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2013/01/'>
January
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/'>
2012
</a>
<span class='post-count' dir='ltr'>(53)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/12/'>
December
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/11/'>
November
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/10/'>
October
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/09/'>
September
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/08/'>
August
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/07/'>
July
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/06/'>
June
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/05/'>
May
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/04/'>
April
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/03/'>
March
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/02/'>
February
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2012/01/'>
January
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/'>
2011
</a>
<span class='post-count' dir='ltr'>(23)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/12/'>
December
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/11/'>
November
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/10/'>
October
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/09/'>
September
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/08/'>
August
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/07/'>
July
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/06/'>
June
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/05/'>
May
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/04/'>
April
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/03/'>
March
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/02/'>
February
</a>
<span class='post-count' dir='ltr'>(1)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2011/01/'>
January
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/'>
2010
</a>
<span class='post-count' dir='ltr'>(93)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/12/'>
December
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/11/'>
November
</a>
<span class='post-count' dir='ltr'>(2)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/10/'>
October
</a>
<span class='post-count' dir='ltr'>(4)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/09/'>
September
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/08/'>
August
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/07/'>
July
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/06/'>
June
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/05/'>
May
</a>
<span class='post-count' dir='ltr'>(5)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/04/'>
April
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/03/'>
March
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/02/'>
February
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2010/01/'>
January
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/'>
2009
</a>
<span class='post-count' dir='ltr'>(146)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/12/'>
December
</a>
<span class='post-count' dir='ltr'>(14)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/11/'>
November
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/10/'>
October
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/09/'>
September
</a>
<span class='post-count' dir='ltr'>(13)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/08/'>
August
</a>
<span class='post-count' dir='ltr'>(9)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/07/'>
July
</a>
<span class='post-count' dir='ltr'>(19)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/06/'>
June
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/05/'>
May
</a>
<span class='post-count' dir='ltr'>(13)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/04/'>
April
</a>
<span class='post-count' dir='ltr'>(10)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/03/'>
March
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/02/'>
February
</a>
<span class='post-count' dir='ltr'>(13)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2009/01/'>
January
</a>
<span class='post-count' dir='ltr'>(11)</span>
</li>
</ul>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/'>
2008
</a>
<span class='post-count' dir='ltr'>(37)</span>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/12/'>
December
</a>
<span class='post-count' dir='ltr'>(12)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/11/'>
November
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/10/'>
October
</a>
<span class='post-count' dir='ltr'>(7)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/09/'>
September
</a>
<span class='post-count' dir='ltr'>(6)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/08/'>
August
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
<ul class='hierarchy'>
<li class='archivedate collapsed'>
<a class='toggle' href='javascript:void(0)'>
<span class='zippy'>

                          &#9658;&#160;
                        
</span>
</a>
<a class='post-count-link' href='https://blog.talosintelligence.com/2008/05/'>
May
</a>
<span class='post-count' dir='ltr'>(3)</span>
</li>
</ul>
</li>
</ul>
</div>
</div>
<div class='clear'></div>
</div>
</div><div class='widget BlogList' data-version='1' id='BlogList1'>
<h2 class='title'>Recommended Blogs</h2>
<div class='widget-content'>
<div class='blog-list-container' id='BlogList1_container'>
<ul id='BlogList1_blogs'>
<li style='display: block;'>
<div class='blog-icon'>
</div>
<div class='blog-content'>
<div class='blog-title'>
<a href='https://blogs.cisco.com' target='_blank'>
Cisco Blog</a>
</div>
<div class='item-content'>
<span class='item-title'>
<a href='https://blogs.cisco.com/sp/wholesale-carriers-benefit-from-the-cisco-qwilt-solution' target='_blank'>
Wholesale Carriers Benefit from the Cisco/Qwilt Solution
</a>
</span>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li style='display: block;'>
<div class='blog-icon'>
</div>
<div class='blog-content'>
<div class='blog-title'>
<a href='http://blog.clamav.net/' target='_blank'>
ClamAV&#174; blog</a>
</div>
<div class='item-content'>
<span class='item-title'>
<a href='http://blog.clamav.net/2022/05/celebrating-20-years-of-clamav.html' target='_blank'>
Celebrating 20 years of ClamAV
</a>
</span>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li style='display: block;'>
<div class='blog-icon'>
</div>
<div class='blog-content'>
<div class='blog-title'>
<a href='http://blog.snort.org/' target='_blank'>
Snort Blog</a>
</div>
<div class='item-content'>
<span class='item-title'>
<a href='http://blog.snort.org/2022/04/weekly-snort-rule-update-for-march-25.html' target='_blank'>
Weekly Snort rule update for March 25 - April 1
</a>
</span>
</div>
</div>
<div style='clear: both;'></div>
</li>
</ul>
<div class='clear'></div>
</div>
</div>
</div></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<footer id='footer'>
<div class='container'>
<div class='row footer_nav_wrapper'>
<div class='col-md-9 col-sm-12'>
<ul class='footer_nav'>
<li class='list_col'>
<ul class='nopad'>
<li class='nopad'>
<ul class='pad first top'>
<li>
<a href='https://talosintelligence.com/software'>Software</a>
</li>
<li>
<a href='https://talosintelligence.com/reputation_center'>Reputation Center</a>
</li>
<li>
<a href='https://talosintelligence.com/vulnerability_info'>Vulnerability Information</a>
</li>
<li>
<a href='https://talosintelligence.com/ms_advisories'>Microsoft Advisory Snort Rules</a>
</li>
</ul>
</li>
<li class='list_col'>
<ul class='pad second'>
<li>
<a href='https://www.talosintelligence.com/incident_response' target='_blank'>Incident Response</a>
</li>
<li>
<a href='https://talosintelligence.com/secure-endpoint-naming'>Secure Endpoint Naming Conventions</a>
</li>
<li>
<a href='https://talosintelligence.com/talos_file_reputation'>Talos File Reputation</a>
</li>
</ul>
</li>
</ul>
</li>
<li class='list_col'>
<ul class='nopad'>
<li class='nopad'>
<ul class='pad first last'>
<li>
<a href='https://talosintelligence.com/resources'>Library</a>
</li>
<li>
<a href='https://talosintelligence.com/community'>Support Communities</a>
</li>
<li>
<a href='https://talosintelligence.com/about'>About</a>
</li>
<li>
<a href='https://talosintelligence.com/careers'>Careers</a>
</li>
</ul>
</li>
<li class='list_col'>
<ul class='pad second last'>
<li>
<a href='https://blog.talosintelligence.com'>Talos Blog</a>
</li>
<li>
<a href='https://talosintelligence.com/newsletters'>Threat Source Newsletter</a>
</li>
<li>
<a href='https://talosintelligence.com/podcasts/shows/beers_with_talos'>Beers with Talos Podcast</a>
</li>
<li>
<a href='https://talosintelligence.com/podcasts/shows/talos_takes'>Talos Takes Podcast</a>
</li>
</ul>
</li>
</ul>
</li>
</ul>
</div>
<div class='col-md-3 col-sm-12 connect_social'>
<h5>Connect With Us</h5>
<ul>
<li>
<a href='https://twitter.com/talossecurity' target='_blank'>
<img alt='Follow us on Twitter' src='https://www.talosintelligence.com/assets/footer_icon_tw.svg'/>
</a>
</li>
<li>
<a href='https://www.youtube.com/playlist?list=PLFT-9JpKjRTDn_qtGN238gzycJfaVzMqD' target='_blank'>
<img alt='Watch our informational videos on YouTube' src='https://www.talosintelligence.com/assets/footer_icon_yt.svg'/>
</a>
</li>
<li>
<a href='https://www.linkedin.com/company/cisco-talos-intelligence-group/' target='_blank'>
<img alt='Connect with us on LinkedIn' src='https://www.talosintelligence.com/assets/footer_icon_li.svg'/>
</a>
</li>
</ul>
</div>
</div>
<div class='row'>
<div class='col-xs-12 footer_corporate'>
<a href="https://tools.cisco.com/security/center/home.x" target='_blank'>
<img alt='Cisco' src='https://www.talosintelligence.com/assets/logo_cisco_white.svg'/>
</a>
<p class='copyright'>&#169; <span id='copyright-year'></span> Cisco Systems, Inc. and/or its affiliates. All rights reserved. 
          
			View our <a class='copyright-underline underline' href='https://www.cisco.com/web/siteassets/legal/privacy_full.html' target='_blank'>Privacy Policy</a>.
		</p>
<script type='text/javascript'>
			document.getElementById('copyright-year').appendChild(document.createTextNode(new Date().getFullYear())) 
		</script>
</div>
</div>
</div>
</footer>
<script>
  (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
  (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
  m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
  })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

  ga('create', 'UA-30016562-3', 'auto');
  ga('send', 'pageview');

 

</script>
<!--It is your responsibility to notify your visitors about cookies used and data collected on your blog. Blogger makes a standard notification available for you to use on your blog, and you can customise it or replace it with your own notice. See http://www.blogger.com/go/cookiechoices for more details.-->
<script defer='' src='/js/cookienotice.js'></script>
<script>
    document.addEventListener('DOMContentLoaded', function(event) {
      window.cookieChoices && cookieChoices.showCookieConsentBar && cookieChoices.showCookieConsentBar(
          (window.cookieOptions && cookieOptions.msg) || 'This site uses cookies from Google to deliver its services and to analyse traffic. Your IP address and user agent are shared with Google, together with performance and security metrics, to ensure quality of service, generate usage statistics and to detect and address abuse.',
          (window.cookieOptions && cookieOptions.close) || 'Ok',
          (window.cookieOptions && cookieOptions.learn) || 'Learn more',
          (window.cookieOptions && cookieOptions.link) || 'https://www.blogger.com/go/blogspot-cookies');
    });
  </script>

<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1502135753-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY4xHatWTrimI5ooIUOU4p-GILzXWg:1652222106202';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d1029833275466591797','//blog.talosintelligence.com/2018/06/vpnfilter-update.html','1029833275466591797');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '1029833275466591797', 'title': 'Cisco Talos Intelligence Group - Comprehensive Threat Intelligence', 'url': 'https://blog.talosintelligence.com/2018/06/vpnfilter-update.html', 'canonicalUrl': 'http://blog.talosintelligence.com/2018/06/vpnfilter-update.html', 'homepageUrl': 'https://blog.talosintelligence.com/', 'searchUrl': 'https://blog.talosintelligence.com/search', 'canonicalHomepageUrl': 'http://blog.talosintelligence.com/', 'blogspotFaviconUrl': 'https://blog.talosintelligence.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': false, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'UA-30016562-3', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom\x22 href\x3d\x22https://blog.talosintelligence.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - RSS\x22 href\x3d\x22https://blog.talosintelligence.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/1029833275466591797/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Cisco Talos Intelligence Group - Comprehensive Threat Intelligence - Atom\x22 href\x3d\x22https://blog.talosintelligence.com/feeds/5913788946872943043/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'ieCssRetrofitLinks': '\x3c!--[if IE]\x3e\x3cscript type\x3d\x22text/javascript\x22 src\x3d\x22https://www.blogger.com/static/v1/jsbin/2068738220-ieretrofit.js\x22\x3e\x3c/script\x3e\n\x3c![endif]--\x3e', 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/30c128759d984ff9', 'plusOneApiSrc': 'https://apis.google.com/js/plusone.js', 'disableGComments': true, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '5913788946872943043', 'postImageThumbnailUrl': 'https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s72-c/image2.jpg', 'postImageUrl': 'https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s640/image2.jpg', 'pageName': 'VPNFilter Update - VPNFilter exploits endpoints, targets new devices', 'pageTitle': 'Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: VPNFilter Update - VPNFilter exploits endpoints, targets new devices', 'metaDescription': ''}}, {'name': 'features', 'data': {'sharing_get_link_dialog': 'true', 'sharing_native': 'false'}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': false, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'VPNFilter Update - VPNFilter exploits endpoints, targets new devices', 'description': 'A blog from the world class Intelligence Group, Talos, Cisco\x27s Intelligence Group', 'featuredImage': 'https://3.bp.blogspot.com/-1OGddXBBf1s/WwTyd0k3szI/AAAAAAAAAgs/82oB9Lftark-aUd7aYp5WnpNcfiAvxKjwCLcBGAs/s640/image2.jpg', 'url': 'https://blog.talosintelligence.com/2018/06/vpnfilter-update.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 5913788946872943043}}]);
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'sidebar', document.getElementById('HTML1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML2', 'sidebar', document.getElementById('HTML2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_SubscribeView', new _WidgetInfo('Subscribe1', 'sidebar', document.getElementById('Subscribe1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive1', 'sidebar', document.getElementById('BlogArchive1'), {'languageDirection': 'ltr', 'loadingMessage': 'Loading\x26hellip;'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogListView', new _WidgetInfo('BlogList1', 'sidebar', document.getElementById('BlogList1'), {'numItemsToShow': 0, 'totalItems': 3}, 'displayModeFull'));
</script>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194" integrity="sha512-Gi7xpJR8tSkrpF7aordPZQlW2DLtzUlZcumS8dMQjwDHEnw9I7ZLyiOj/6tZStRBGtGgN6ceN6cMH8z7etPGlw==" data-cf-beacon='{"rayId":"70962562eecb54e2","token":"35f8ae698f9d471b83b846a751388737","version":"2021.12.0","si":100}' crossorigin="anonymous"></script>
</body>
</html>